2025

An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQ

An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQ

An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQ

An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQ

An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQ

A vulnerability was found in StarSea99 starsea-mall 1.0. It has been rated as problematic. This issue affects some unkno

HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability. The application transmit

HCL MyXalytics is affected by a malicious file upload vulnerability. The application accepts invalid file uploads, incl

HCL MyXalytics is affected by sensitive information disclosure vulnerability. The HTTP response header exposes the Micr

A vulnerability has been found in longpi1 warehouse 1.0 and classified as problematic. Affected by this vulnerability is

A vulnerability, which was classified as problematic, was found in reckcn SPPanAdmin 1.0. Affected is an unknown functio

HCL MyXalytics is affected by a weak input validation vulnerability. The application accepts special characters and the

HCL MyXalytics is affected by username enumeration vulnerability. This allows a malicious user to perform enumeration o

An issue was discovered in REDCap 14.9.6. It has an action=myprojects&logout=1 CSRF issue in the alert-title while perfo

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Browser Bac

Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affect

Strawberry GraphQL is a library for creating GraphQL APIs. Starting in 0.182.0 and prior to version 0.257.0, a type conf

A buffer overflow vulnerability in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's

A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issu

A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0.

Mattermost versions 9.11.x <= 9.11.5 fail to enforce invite permissions, which allows team admins, with no permission to

Mattermost versions 10.x <= 10.2 fail to accurately reflect missing settings, which allows confusion for admins regardin

A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown

A vulnerability classified as problematic was found in SingMR HouseRent 1.0. This vulnerability affects unknown code of

A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function o

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been rated as problematic. Affected by this issue

A vulnerability was found in wander-chu SpringBoot-Blog 1.0 and classified as problematic. This issue affects the functi

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignor

A vulnerability classified as problematic was found in langhsu Mblog Blog System 3.5.0. Affected by this vulnerability i

A vulnerability classified as problematic has been found in langhsu Mblog Blog System 3.5.0. Affected is an unknown func

A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been rated as problematic. This issue affects the

A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been declared as problematic. This vulnerability

A vulnerability, which was classified as problematic, was found in ZeroWdd myblog 1.0. Affected is the function update o

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an un

A vulnerability, which was classified as problematic, has been found in code-projects Online Book Shop 1.0. Affected by

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been b

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive

A vulnerability was found in code-projects Online Book Shop 1.0 and classified as problematic. Affected by this issue is

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation

The Form Maker by 10Web WordPress plugin before 1.15.31 does not sanitise and escape some of its settings, which could

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some

The Spacer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the mo

An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

IBM UrbanCode Deploy (UCD) 7.2 through 7.2.3.13, 7.3 through 7.3.2.8, and IBM DevOps Deploy 8.0 through 8.0.1.3 are vuln

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TUBITAK BILG

A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the functi

A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects

A vulnerability has been found in code-projects Local Storage Todo App 1.0 and classified as problematic. This vulnerabi