2025

A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a use

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Gallery

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 BEAR wo

Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Cont

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Detheme DethemeKit

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT B

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Waymark waymar

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webilia Inc. Verte

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RebelCode Spotlight Social M

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Timeline

The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initial

Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitr

A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critica

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. Affected by this issue is so

A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. A

Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect (Legacy Mode), StellarEnforc

The OWL Carousel Slider WordPress plugin through 2.2 does not sanitise and escape a parameter before outputting it back

The Track Logins WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statemen

The Wise Forms WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow unaut

A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This

Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android ver

A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the

A vulnerability, which was classified as critical, has been found in MicroWorld eScan Antivirus 7.0.32 on Linux. Affecte

A vulnerability classified as critical was found in MicroWord eScan Antivirus 7.0.32 on Linux. Affected by this vulnerab

A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been classified as critical. This affects

A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux and classified as critical. Affected by this issu

A vulnerability, which was classified as critical, was found in GNU elfutils 0.192. This affects the function process_sy

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Fahad Mahmood Keep Backu

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Qubely qub

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VaultDweller Leyka

Missing Authorization vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calc

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hashthemes Easy El

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cheesefather Botne

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Levan Tarbor Forex

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in upcasted AWS S3 fo

Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quot

Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-uni

A vulnerability has been found in MicroWord eScan Antivirus 7.0.32 on Linux and classified as critical. Affected by this

A vulnerability, which was classified as problematic, has been found in SIAM Industria de Automação e Monitoramento SIAM

A vulnerability classified as problematic was found in Pix Software Vivaz 6.0.10. This vulnerability affects unknown cod

A vulnerability classified as problematic has been found in Seventh D-Guard up to 20250206. This affects an unknown part

A vulnerability was found in needyamin Library Card System 1.0. It has been rated as critical. Affected by this issue is

A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function

A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been rated as critical. This issue affects the

A vulnerability has been found in CmsEasy 7.7.7.9 and classified as problematic. Affected by this vulnerability is the f

A vulnerability, which was classified as problematic, was found in CmsEasy 7.7.7.9. Affected is the function deleteimg_a

libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c v

The Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme plugin for WordP

Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the file

The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for Wo