2025

A vulnerability was found in mtons mblog up to 3.5.0. The impacted element is an unknown function of the file /admin/use

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed users with access to an

A vulnerability has been found in mtons mblog up to 3.5.0. The affected element is an unknown function of the file /admi

A flaw has been found in mtons mblog up to 3.5.0. Impacted is an unknown function of the file /search. This manipulation

A vulnerability was detected in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/o

A security vulnerability has been detected in mtons mblog up to 3.5.0. This vulnerability affects unknown code of the fi

A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown par

A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue

A vulnerability was identified in Ruijie WS7204-A 2017.06.15. Affected by this vulnerability is an unknown functionality

A vulnerability was determined in Campcodes Online Water Billing System 1.0. Affected is an unknown function of the file

A vulnerability was found in oitcode samarium up to 0.9.6. This impacts an unknown function of the file /dashboard/team

A vulnerability has been found in itsourcecode Apartment Management System 1.0. This affects an unknown function of the

A flaw has been found in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of th

The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off conditio

request-filtering-agent is an http(s).Agent implementation that blocks requests to Private/Reserved IP addresses. Versio

XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21,

The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, c

A vulnerability was detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown functio

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown funct

On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. U

h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulne

A weakness has been identified in itsourcecode Apartment Management System 1.0. This issue affects some unknown processi

A security flaw has been discovered in oitcode samarium up to 0.9.6. This vulnerability affects unknown code of the file

File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller. This flaw al

On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in

A vulnerability was identified in GreenCMS up to 2.3.0603. This affects an unknown part of the file /index.php?m=admin&c

A vulnerability was found in kalcaddle kodbox 1.61. Affected by this vulnerability is an unknown functionality of the fi

A flaw has been found in lostvip-com ruoyi-go up to 2.1. This impacts the function SelectListByPage of the file modules/

A vulnerability was detected in lostvip-com ruoyi-go up to 2.1. This affects the function SelectListByPage of the file m

Craft is a platform for creating digital experiences. From versions 4.0.0-RC1 to 4.16.5 and 5.0.0-RC1 to 5.8.6, there is

Airlink's Daemon interfaces with Docker and the Panel to provide secure access for controlling instances via the Panel.

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by paramet

A security vulnerability has been detected in lostvip-com ruoyi-go up to 2.1. The impacted element is the function Selec

A weakness has been identified in lostvip-com ruoyi-go up to 2.1. The affected element is the function SelectListByPage

Securden’s Unified PAM Remote Vendor Gateway access portal shares infrastructure and access tokens across multiple tenan

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, because DB2 para

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, there is a H2 JD

Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exis

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and s

Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Commo

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.

PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function.

A security flaw has been discovered in lostvip-com ruoyi-go up to 2.1. Impacted is the function DownloadTmp/DownloadUplo

SQL Injection vulnerability in SMM Panel 3.1 allowing remote attackers to gain sensitive information via a crafted HTTP

Cross Site Scripting vulnerability in docmost v.0.21.0 and before allows an attacker to execute arbitrary code

FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article. This allows attackers to execute arbi

The Scratch Channel is a news website. In version 1, it is possible to go to application in devtools and click local sto

An unauthenticated unrestricted file upload vulnerability allows an attacker to upload malicious binaries and scripts to

An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup f

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Enterprise Security Manager. The vulne