2025

A vulnerability classified as critical has been found in Tenda AC10 16.03.10.13. Affected is an unknown function of the

The Melapress Login Security plugin for WordPress is vulnerable to Authentication Bypass due to missing authorization wi

A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the funct

The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a

tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with supp

dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files. In versions 0.23.0

Anubis is a Web AI Firewall Utility that weighs the soul of users' connections using one or more challenges in order to

skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below co

skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below co

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions bet

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to vers

HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends. In versions 11.0.13 and below of haxcm

FreeScout is a lightweight free open source help desk and shared inbox built with PHP (Laravel framework). In versions 1

DbGate is cross-platform database manager. In versions 6.6.0 and below, DbGate allows unauthorized file access due to in

DbGate is cross-platform database manager. In versions 6.4.3-premium-beta.5 and below, DbGate is vulnerable to a directo

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown p

A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some

A vulnerability has been found in 1000 Projects ABC Courier Management System 1.0 and classified as critical. Affected b

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System 1.0. Affected is

A vulnerability, which was classified as critical, has been found in code-projects Document Management System 1.0. This

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Linkify (link

A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015. This vulnerability affects the fu

A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function formSetWanPPTPca

A vulnerability was found in D-Link DIR-513 1.10. It has been rated as critical. Affected by this issue is the function

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by

Cross Site Scripting vulnerability in grav v.1.7.48, v.1.7.47 and v.1.7.46 allows an attacker to execute arbitrary code

An issue was discovered on IROAD Dashcam FX2 devices. Dumping Files Over HTTP and RTSP Without Authentication can occur.

A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is a

A vulnerability was found in code-projects Food Review System 1.0 and classified as critical. This issue affects some un

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) all

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector mod

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source module

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Serve

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (set-initi

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc a

A vulnerability has been found in code-projects Public Chat Room 1.0 and classified as critical. This vulnerability affe

A vulnerability, which was classified as critical, was found in deerwms deer-wms-2 up to 3.3. This affects an unknown pa

A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length

Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafte

A vulnerability, which was classified as critical, has been found in deerwms deer-wms-2 up to 3.3. Affected by this issu

A vulnerability classified as critical was found in deerwms deer-wms-2 up to 3.3. Affected by this vulnerability is an u

Abnormal Security /v1.0/rbac/users_v2/{USER_ID}/ before 2025-02-19 allows downgrading the privileges of other user accou

Cross Site Scripting vulnerability in tawk.to Live Chat v.1.6.1 allows a remote attacker to execute arbitrary code via t

OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via SVG file uploads used in blog p

OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor. The vulnerabil

A stored cross-site scripting (XSS) vulnerability in CodeIgniter4 v4.6.0 allows attackers to execute arbitrary web scrip