Results
48,153· Page 402/964SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. There is a vul
A vulnerability was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. It has been rated as critic
A vulnerability was found in Open5GS up to 2.7.5. It has been classified as problematic. Affected is the function amf_ns
Azure Portal Elevation of Privilege Vulnerability
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
Azure OpenAI Elevation of Privilege Vulnerability
ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not som
The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when succ
BMC Control-M/Server 9.0.21.300 displays cleartext database credentials in process lists and logs. An authenticated atta
In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while par
In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer wh
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer whil
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer whil
A vulnerability was found in agentUniverse up to 0.0.18 and classified as critical. This issue affects the function Stdi
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used
Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating s
An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access in
FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.
GPMAW 14, a bioinformatics software, has a critical vulnerability related to insecure file permissions in its installati
A cross-site scripting (XSS) vulnerability in the PdfViewer component of Agenzia Impresa Eccobook 2.81.1 allows attacker
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact parameter i
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the user
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in a
Hospital Management System v4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in func2.php
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the tx
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in fun
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the user
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username paramet
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress par
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStuden
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessio
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassA
Student Attendance Management System v1 was discovered to contain a cross-site scripting (XSS) vulnerability via the ses
Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the pas
LinkJoin through 882f196 mishandles token ownership in password reset.
LinkJoin through 882f196 mishandles lacks type checking in password reset.
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Information Into Se
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection. Authenticated u
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configu
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credenti
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection. Authent
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error d
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model
A command injection vulnerability exists in the 'passwd' parameter of the PPPoE setup process on the Shenzhen Aitemi M30
The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) is vulnerable to comm
A command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) during WPA2 conf
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model
Test your stack for 2025issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.