2025

Genealogy is a family tree PHP application. Prior to 4.4.0, Authenticated Reflected Cross-Site Scripting (XSS) vulnerabi

Genealogy is a family tree PHP application. Prior to 4.4.0, Authenticated Stored Cross-Site Scripting (XSS) vulnerabilit

aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that

aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that

Copier library and CLI app for rendering project templates. From 7.1.0 to before 9.9.1, Copier suggests that it's safe t

Capsule is a multi-tenancy and policy-based framework for Kubernetes. A namespace label injection vulnerability in Capsu

Copier library and CLI app for rendering project templates. Prior to 9.9.1, a safe template can currently read and write

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabil

Liferay Portal 7.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS) vulnerab

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Sensitive information disclosure in

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS) vulnerab

An Insecure Direct Object Reference (IDOR) vulnerability was identified in the `POST /v1/templates` endpoint of the Luna

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.

IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH s

IBM Concert Software 1.0.0 through 1.1.0 contains hard-coded credentials, such as a password or cryptographic key, whi

IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to cause a denial of service using a specially cr

IBM Concert Software 1.0.0 through 1.1.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carr

IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated me

IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to excessive data exposure, allowing attackers to access sensitiv

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through

An out-of-bounds write vulnerability has been reported to affect File Station 5. If a remote attacker gains a user accou

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant

CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary

CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP co

DIAEnergie - Reflected Cross-site Scripting

DIAEnergie - Reflected Cross-site Scripting

DIAEnergie - Reflected Cross-site Scripting

DIAEnergie - Stored Cross-site Scripting

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown fun

Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of rendered

A vulnerability was determined in Portabilis i-Diario up to 1.5.0. This impacts an unknown function of the file /alunos/

A vulnerability was found in Portabilis i-Diario up to 1.5.0. This affects an unknown function of the file /planos-de-en

A vulnerability has been found in Portabilis i-Diario up to 1.5.0. The impacted element is an unknown function of the fi

A flaw has been found in Portabilis i-Diario up to 1.5.0. The affected element is an unknown function of the file /plano

A vulnerability was detected in ZenCart 2.1.0. Affected by this vulnerability is an unknown functionality of the compone

A security vulnerability has been detected in 1&1 Mail & Media mail.com App 8.8.0 on Android. Affected is an unknown fun

A weakness has been identified in zhenfeng13 My-Blog up to 1.0.0. This issue affects some unknown processing of the file

A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /bl

A vulnerability was identified in Acrel Environmental Monitoring Cloud Platform up to 20250804. This affects an unknown

A vulnerability was determined in Elseplus File Recovery App 4.4.21 on Android. Affected by this issue is some unknown f

In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote esc

In Developer Tools, there is a possible missing verification incorrect input. This could lead to local escalation of pri

In engineer mode service, there is a possible command injection due to improper input validation. This could lead to loc

A vulnerability was found in Euro Information CIC banque et compte en ligne App 12.56.0 on Android. Affected by this vul

A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the l

A flaw has been found in ExpressGateway express-gateway up to 1.16.10. This issue affects some unknown processing in the

A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Ha

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows

A security vulnerability has been detected in BuzzFeed App 2024.9 on Android. This affects an unknown part of the file A