2025

Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php.

Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php.

An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can write arbi

Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php.

Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php.

Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_scheduledfile.php.

In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php,

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the WSCView fu

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/FilterEdit

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCView/Save func

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal. Arbitrary files can be created

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer

jte (Java Template Engine) is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTM

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In affected versions an admin can a

An issue was discovered in Samsung Mobile Processor and Modem Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, 1330,

BigId PrivacyPortal v179 is vulnerable to Cross Site Scripting (XSS) via the "Label" field in the Report template functi

An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a le

A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting (XSS) via the vehicalorcview parameter

In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types a

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the last_name parameter the General

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 108

An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a le

Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile.

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Co

CloudStack users can add and read comments (annotations) on resources they are authorised to access.  Due to an access

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data ou

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to write data out

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data ou

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Workfl

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its form s

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of form setti

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Text B

A vulnerability classified as critical was found in liujianview gymxmjpa 1.0. This vulnerability affects the function Me

A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0. This affects the function MembertypeD

A vulnerability was found in liujianview gymxmjpa 1.0. It has been rated as critical. Affected by this issue is the func

A vulnerability was found in liujianview gymxmjpa 1.0. It has been declared as critical. Affected by this vulnerability

A vulnerability was found in liujianview gymxmjpa 1.0. It has been classified as critical. Affected is the function Subj

A vulnerability was found in liujianview gymxmjpa 1.0 and classified as critical. This issue affects the function GoodsD

A vulnerability has been found in liujianview gymxmjpa 1.0 and classified as critical. This vulnerability affects the fu

A vulnerability, which was classified as problematic, has been found in 1902756969 reggie 1.0. Affected by this issue is

A vulnerability classified as critical was found in 1902756969 reggie 1.0. Affected by this vulnerability is the functio

A vulnerability classified as critical has been found in 1902756969 reggie 1.0. Affected is the function download of the