2025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ralf Hortt Confirm

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreatorTeam Zoho C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi Floati

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFable Fable Extr

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pReya External Mar

Server-Side Request Forgery (SSRF) vulnerability in Adam Pery Animate animate allows Server Side Request Forgery.This is

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in warmwhisky GTDB Gu

Cross-Site Request Forgery (CSRF) vulnerability in Sebastian Echeverry SCSS-Library scss-library allows Cross Site Reque

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Serio

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Heateor Support Sassy Social Share sassy-social-sha

Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocomme

Missing Authorization vulnerability in vowelweb Sirat sirat allows Exploiting Incorrectly Configured Access Control Secu

Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's file

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profile_upda

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/cla

A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0. The issue affects

Denial of service due to allocation of resources without limits. The following products are affected: Acronis Cyber Prot

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protec

A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorizatio

A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when pars

Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames.

The FuseDesk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘successredirect’ parameter in al

The Buddypress Force Password Change plugin for WordPress is vulnerable to authenticated account takeover due to the plu

The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress is vulnerable to SQL Injectio

The Lottie Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File uploads in all versions up

The Advanced Accordion Gutenberg Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File up

The Woocommerce Automatic Order Printing | ( Formerly WooCommerce Google Cloud Print) plugin for WordPress is vulnerable

The Reales WP - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized modification and loss of d

An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions fro

An issue has been discovered in access controls could allow users to view certain restricted project information even wh

Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to properly validate the props used by th

Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to validate the uniqueness and quantity o

Use of hard-coded cryptographic key vulnerability in i-PRO Configuration Tool affects the network system for i-PRO Co.,

The Category Posts Widget WordPress plugin before 4.9.20 does not sanitise and escape some of its settings, which could

The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the board_header and board_foote

Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can

Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet.

NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role t

IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical erro

IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline fu

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation v

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue a

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Class

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Bootstrap S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox al

BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability. This vulner

BEC Technologies Multiple Routers Authentication Bypass Vulnerability. This vulnerability allows remote attackers to byp