2025

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the ri

A cookie security configuration vulnerability in Kentico Xperience allows attackers to bypass SSL requirements when sett

EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access fi

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers t

File Thingie 2.5.7 contains an authenticated file upload vulnerability that allows remote attackers to upload malicious

EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to execute a

Codigo Markdown Editor 1.0.1 contains a code execution vulnerability that allows attackers to run arbitrary system comma

TinyWebGallery v2.5 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject m

RockMongo 1.1.7 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts t

Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32

Cameleon CMS 2.7.4 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to

WBiz Desk 1.2 contains a SQL injection vulnerability that allows non-admin users to manipulate database queries through

A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requ

A reflected cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scrip

A stored cross-site scripting vulnerability in Kentico Xperience allows global administrators to inject malicious payloa

A reflected cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scrip

An information disclosure vulnerability in Kentico Xperience allows attackers to view sensitive stack trace details via

A stored cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scripts

An HTML injection vulnerability in Kentico Xperience allows attackers to inject malicious HTML values into form submissi

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form r

A CRLF injection vulnerability in Kentico Xperience allows attackers to manipulate URL query string redirects via improp

A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via adm

A stored cross-site scripting vulnerability in Kentico Xperience allows administration users to inject malicious scripts

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through exi

A SQL injection vulnerability in Kentico Xperience allows authenticated editors to inject malicious SQL queries via onli

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to upload files with spoofed Content-T

An access control bypass vulnerability in Kentico Xperience allows administrators to modify global administrator user pr

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via error

An information disclosure vulnerability in Kentico Xperience allows authenticated users to view sensitive system objects

An unrestricted file upload vulnerability in Kentico Xperience allows authenticated users with 'Read data' permissions t

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP

MyHoard is a daemon for creating, managing and restoring MySQL backups. Starting in version 1.0.1 and prior to version 1

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.

A denial-of-service vulnerability exists in the omec-upf (upf-epc-pfcpiface) in version upf-epc-pfcpiface:2.1.3-dev. Whe

A denial-of-service vulnerability exists in the omec-project UPF (component upf-epc/pfcpiface) up to at least version up

The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests. An un

An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or o

An issue was discovered in Open5GS 2.7.5-49-g465e90f, when processing a PFCP Session Establishment Request (type=50), th

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to th

FreshRSS is a free, self-hostable RSS aggregator. Versions prior to 1.27.1 have a logout cross-site request forgery vuln

Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-compose.yaml file inclu

A flaw has been found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the a

Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download th

Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbi

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectl

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem

Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks radius-blocks allows Exploit