2025

BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitra

There is an HTML injection issue in Esri ArcGIS Web AppBuilder developer edition versions prior to 2.30 that allows a re

A security flaw has been discovered in code-projects Simple Stock System 1.0. Affected by this issue is some unknown fun

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unkno

A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file applic

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Quest Coexistence Mana

A vulnerability was found in 1541492390c yougou-mall up to 0a771fa817c924efe52c8fe0a9a6658eee675f9f. This impacts the fu

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cg

A flaw has been found in code-projects Simple Stock System 1.0. The impacted element is an unknown function of the file

A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unkno

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary p

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.8.1 through 2.52.0

A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0. Impacted is an unk

A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of t

A security flaw has been discovered in floooh sokol up to 33e2271c431bf21de001e972f72da17a984da932. This vulnerability a

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, Langflow provides

Orejime is a consent manager that focuses on accessibility. On HTML elements handled by Orejime prior to version 2.3.2,

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stor

pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the d

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injectin

Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating

Galette is a membership management web application for non profit organizations. Starting in version 0.9.6 and prior to

A vulnerability was identified in WebAssembly Binaryen up to 125. This affects the function IRBuilder::makeLocalGet/IRBu

A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReade

A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ogs_pfcp_handle_create_

ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being sh

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content bein

Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users tha

Gotham Gaia application was found to be exposing multiple unauthenticated endpoints.

EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export

Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escala

The Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths before resolving them

Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to

AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vulnerability caused by predictabl

A vulnerability has been found in Open5GS up to 2.7.6. Affected is the function ogs_pfcp_pdr_find_or_add/ogs_pfcp_far_fi

A flaw has been found in Open5GS up to 2.7.5. This impacts the function ogs_pfcp_handle_create_pdr in the library lib/pf

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status qu

Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator authe

Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerabilit

Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR

igmpproxy 0.4 before commit 2b30c36 allows remote attackers to cause a denial of service (application crash) via a craft

A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unk

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown functio

Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Unifor

An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intende

Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not

Cross-Site Request Forgery (CSRF) vulnerability in Restajet Information Technologies Inc. Online Food Delivery System al

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Restajet Information Technologies Inc. Online Food