2025

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing o

A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown co

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unkno

A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1. Affected by this issue is some unknown fun

A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Affected by this vulnerabil

A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Affected is an unknown function

A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. E

A vulnerability was found in axboe fio up to 3.41. This affects the function str_buffer_pattern_cb of the file options.c

A vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogControlle

In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8,

Insecure Direct Object Reference (IDOR) vulnerability with commerce order notes in Liferay Portal 7.3.5 through 7.4.3.11

A flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of

A vulnerability was detected in fuyang_lipengjun platform 1.0. Impacted is the function TopicController of the file /top

A security vulnerability has been detected in fuyang_lipengjun platform 1.0. This issue affects the function UserCouponC

Batch Engine in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2

A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown co

A security flaw has been discovered in Jinher OA 2.0. This affects an unknown part of the file /c6/Jhsoft.Web.module/Too

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

Codex CLI is a coding agent from OpenAI that runs locally. In versions 0.2.0 to 0.38.0, due to a bug in the sandbox conf

iNiLabs School Express (SMS Express) 6.2 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the content

Stocky POS with Inventory Management & HRM (ui-lib) version 5.0 is affected by a Stored Cross-Site Scripting (XSS) vulne

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than in

A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this issue is the function strcpy of the fil

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown fun

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vu

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side

mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Prior to version 2.0

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to August 2025 Cloud-Host

Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata. Prior to ve

SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security L

MagicProject AI version 9.1 is affected by a Cross-Site Scripting (XSS) vulnerability within the chatbot generation feat

A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /ju

A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the fi

A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery (SSRF

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerabili

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fernando Acosta Ma

Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Medi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soleda

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Darren Cooney Ajax Load More

Missing Authorization vulnerability in VW THEMES Ibtana ibtana-visual-editor allows Exploiting Incorrectly Configured Ac

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Stylemix Ma

Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel Engine W