2025

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. This vulnerability affects

A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this issue is some unknown func

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown

A vulnerability was determined in Campcodes Online Learning Management System 1.0. Affected is an unknown function of th

A vulnerability was found in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the fi

A vulnerability has been found in Campcodes Online Learning Management System 1.0. This affects an unknown function of t

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the

A vulnerability was detected in Keyfactor RG-EW5100BE EW_3.0B11P280_EW5100BE-PRO_12183019. The affected element is an un

A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_c

Denial of Service issue in GraphQL endpoints in Gitlab EE/CE affecting all versions from 11.10 prior to 18.2.7, 18.3 pri

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the `get_cache_dir()` function where a

A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /st

A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the fi

A vulnerability was found in westboy CicadasCMS 1.0. Affected by this vulnerability is an unknown functionality of the f

A vulnerability has been found in Projectworlds Visitor Management System 1.0. Affected is an unknown function of the fi

A flaw has been found in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administ

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Impacted is an unknown function

A vulnerability was identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown proce

A vulnerability was determined in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown co

A vulnerability was found in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some un

A flaw has been found in ProjectsAndPrograms School Management System 1.0. Affected by this vulnerability is an unknown

A vulnerability was detected in SourceCodester Online Hotel Reservation System 1.0. Affected is an unknown function of t

A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function

A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-passwor

The Professional Contact Form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, an

The Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms plugin for WordPress is vulnerable to

The cForms – Light speed fast Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi

The HidePost plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.

The Sync Feedly plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1

The VM Menu Reorder plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i

A security flaw has been discovered in kidaze CourseSelectionSystem 1.0/5.php. The impacted element is an unknown functi

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknow

The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to Stored Cros

Versions of the package algoliasearch-helper from 2.0.0-rc1 and before 3.11.2 are vulnerable to Prototype Pollution in t

A flaw has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /periodo-lancamento. E

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic

A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request

The Team Members plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the first and last name fields in

IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site scripting. This vulnerability allows an u

IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site request forgery which could allow an attack

SysReptor is a fully customizable pentest reporting platform. In versions from 2024.74 to before 2025.83, authenticated

WeGIA is a Web manager for charitable institutions. Prior to version 3.5.0, WeGIA is vulnerable to SQL Injection attacks

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from

get-jwks contains fetch utils for JWKS keys. In versions prior to 11.0.2, a vulnerability in get-jwks can lead to cache

Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previo

IBM Lakehouse (watsonx.data 2.2) stores potentially sensitive information in log files that could be read by a local use

Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verifica