2025

Due to insufficient CSRF protection in SAP Fiori App Manage Work Center Groups, an authenticated user could be tricked b

SAP NetWeaver AS Java allows an attacker authenticated as a non-administrative user to use a flaw in an available servic

Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management, an unauthenticated attack

SAP NetWeaver Application Server for ABAP allows authenticated users with access to background processing to gain unauth

SAP HCM Approve Timesheets Fiori 2.0 application does not perform necessary authorization checks for an authenticated us

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbi

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic use

Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in

Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in

SAP HCM My Timesheet Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, re

SAP NetWeaver (Service Data Download) allows an authenticated user to call a remote-enabled function module, which could

A flaw has been found in uverif up to 3.2. This affects the function addbatch of the file /admin/kami_list. This manipul

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /g

A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The

A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the fi

A vulnerability was identified in SiempreCMS up to 1.3.6. This vulnerability affects unknown code of the file /docs/admi

A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file user_search_ajax.php.

A vulnerability was found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file

MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the

MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, in

MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. The extractall function `zip_file.extracta

A server-side request forgery (SSRF) vulnerability exist in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP

A security vulnerability has been detected in itsourcecode Student Information Management System 1.0. This affects an un

A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unk

Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, any HTML files o

Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting w

The Volkov Labs Business Links panel for Grafana provides an interface to navigate using external links, internal dashbo

WeGIA is a Web manager for charitable institutions. The fix for CVE-2025-22133 was not enough to remediate the arbitrary

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in WeGIA versions 3.4.1

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in WeGIA versions 3.4.1

WeGIA is a Web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified

IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated me

A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is a

A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. The manipul

A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processin

Cattown is a JavaScript markdown parser. Versions prior to 1.0.2 used regular expressions with inefficient, potentially

pREST (PostgreSQL REST), is an API that delivers an application on top of a Postgres database. SQL injection is possible

Maho is a free and open source ecommerce platform. In Maho prior to 25.9.0, an authenticated staff user with access to t

The MCP inspector is a developer tool for testing and debugging MCP servers. A cross-site scripting issue was reported i

The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Prior to version 9.14, th

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the OAuth client creation and update endp

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the Fides Webserver API's built-in IP-bas

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the Fides Admin UI login endpoint relies

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, admin UI user password changes in Fides d

A vulnerability was found in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the

A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.1. This affects an unknown part of the file /cms/collec

Assertion failure in function ngap_build_downlink_nas_transport in file src/amf/ngap-build.c, the Access and Mobility Ma

A flaw has been found in yanyutao0402 ChanCMS up to 3.3.1. Affected by this issue is some unknown functionality of the f

@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13

LinkAce is a self-hosted archive to collect website links. A stored cross-site scripting (XSS) vulnerability was discove