2025

A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in  spacewalk-java allows

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS

A vulnerability, which was classified as critical, has been found in PHPGurukul Student Study Center Management System 1

Fess is a deployable Enterprise Search Server. Prior to version 14.19.2, the createTempFile() method in org.codelibs.fes

The installer in SIGB PMB before and fixed in v.8.0.1.2 allows remote code execution.

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized modifi

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored

In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.

SIGB PMB before 8.0.1.2 allows SQL injection.

IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML attrib

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.

A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functio

For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.

A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in spacewalk-java allows e

The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone t

In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change()

A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability

Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to pr

Insertion of Sensitive Information Into Sent Data vulnerability in Spotlight Spotlight - Social Media Feeds (Premium) al

A vulnerability was found in thinkgem JeeSite up to 5.11.1. It has been rated as critical. Affected by this issue is the

A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been declared as

Missing authorization vulnerability in TCMAN's GIM v11. This allows an authenticated attacker to access any functionalit

A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been classified

A vulnerability has been found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as c

A vulnerability classified as critical has been found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected i

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been rated as problematic. This

A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between se

Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject H

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the functio

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the

A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unau

A vulnerability, which was classified as critical, has been found in llisoft MTA Maita Training System 4.5. This issue a

A vulnerability classified as critical was found in llisoft MTA Maita Training System 4.5. This vulnerability affects th

A vulnerability, which was classified as problematic, was found in yangshare 技术杨工 warehouseManager 仓库管理系统 1.0. This affe

A vulnerability, which was classified as critical, has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected

A vulnerability classified as problematic was found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this vulne

A vulnerability classified as problematic has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected is the f

A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been rated as problematic. This issue aff

A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been declared as problematic. This vulner

A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been classified as critical. This affects

A vulnerability has been found in qianfox FoxCMS 1.2.5 and classified as critical. Affected by this vulnerability is the

A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code

A vulnerability classified as critical has been found in defog-ai introspect up to 0.1.4. This affects the function exec

A vulnerability was found in docarray up to 0.40.1. It has been rated as critical. Affected by this issue is the functio

A vulnerability was found in WCMS up to 8.3.11. It has been declared as critical. Affected by this vulnerability is the

A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classi

A vulnerability was found in Netcore NBR1005GPEV2, NBR200V2 and B6V2 up to 20250508 and classified as critical. This iss

A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 up to 202505