2025

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

The Slider Revolution plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.7.36

The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valida

Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG

Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.1.0 and prior to

A Session Fixation vulnerability existed in Payload's SQLite adapter due to identifier reuse during account creation. A

Payload uses JSON Web Tokens (JWT) for authentication. After log out JWT is not invalidated, which allows an attacker wh

The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typewr

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS Se

Uncaught exception issue exists in Multiple products in bizhub series. If a malformed file is imported as an S/MIME Emai

The iATS Online Forms plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order' parameter in all ve

The Ultimate Tag Warrior Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to

The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map

The List Subpages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all ver

The LWSCache plugin for WordPress is vulnerable to unauthorized modification of data due to improper authorization on th

Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS c

Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploit

The QbiCRMGateway developed by Ai3 has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attacker

A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of

A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown process

A vulnerability was found in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /educac

TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read,

Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers t

Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to

A vulnerability has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/Formu

A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the fil

A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionali

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControl

NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM

There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated u

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated u

There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject e

A vulnerability was identified in coze-studio up to 0.2.4. The impacted element is an unknown function of the file backe

A vulnerability was determined in Telesquare TLR-2005KSH 1.2.4. The affected element is an unknown function of the file

A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. P

A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is so

A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unk

Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because the

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sono

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious a

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sono