2025

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS allo

A vulnerability, which was classified as critical, has been found in code-projects Product Management System 1.0. Affect

A vulnerability classified as critical was found in code-projects Simple Movie Ticket Booking System 1.0. Affected by th

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, a stored cross-site scripting (XSS) vulnerability was d

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScrip

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScrip

CWE-798: Use of Hard-coded Credentials

IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting. This v

A vulnerability classified as critical has been found in ScriptAndTools Online-Travling-System 1.0. Affected is an unkno

Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption a

A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat.

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into us

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitr

A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null c

A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension

Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user int

Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vul

A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been classified as critical. This affects

A vulnerability was found in code-projects Student Information Management System 1.0 and classified as critical. Affecte

A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical. Affected by

A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0

A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix

A vulnerability classified as critical was found in code-projects Prison Management System 1.0. This vulnerability affec

An XSS issue was discovered in MDaemon Email Server version 25.0.1 and below. An attacker can send a specially crafted H

A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, spe

The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to unauthorized modification of data due to a

The Gutenverse – Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cro

n8n is a workflow automation platform. Prior to version 1.90.0, n8n is vulnerable to stored cross-site scripting (XSS) t

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.21.0, an improper input handling vulner

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadO

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4

The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequ

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6

The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequ

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3

A vulnerability was found in code-projects Train Ticket Reservation System 1.0. It has been declared as critical. Affect

A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function

Missing input validation in certain features of the Web Client of Fortra's GoAnywhere prior to version 7.8.0 allows an a

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthent

A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical. This issue affects the function updateBoo

A vulnerability was found in inclusionAI AWorld up to 8c257626e648d98d793dd9a1a950c2af4dd84c4e. It has been rated as cri

GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. An authenticated and remot

A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by

Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed.

OneVision Workspace before WS23.1 SR1 (build w31.040) allows arbitrary Java EL execution.

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.5.7, 0.4.

DIFY is an open-source LLM app development platform. Prior to version 1.3.0, a clickjacking vulnerability was found in t

DevExpress before 23.1.3 allows AsyncDownloader SSRF.