2025

A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows atta

A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows atta

Xtooltech Xtool AnyScan Android Application 4.40.40 is Missing Authentication for Critical Function. The server-side end

Xtooltech Xtool AnyScan Android Application 4.40.40 and prior uses a hardcoded cryptographic key and IV to decrypt updat

Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation. The application fai

A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Insti

A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Insti

Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensit

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_Subs

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST

An issue in Austrian Academy of Sciences (AW) Austrian Archaeological Institute OpenAtlas v.8.12.0 allows a remote attac

Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fa

Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names. When the File option i

Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain c

Use after free in endpoint destructors in Redboltz async_mqtt 10.2.5 allows local users to cause a denial of service via

Null pointer dereference in add_ca_certs() in Cesanta Mongoose before 7.2 allows remote attackers to cause a denial of s

Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote attackers to cause a denial of

NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attack

Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause

NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attack

NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attack

NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attack

The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass th

A vulnerability was found in lKinderBueno Streamity Xtream IPTV Player up to 2.8. The impacted element is an unknown fun

A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file

The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.0 does not validate a parameter before

The Backup Migration WordPress plugin before 2.0.0 does not properly generate its backup path in certain server configur

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unkn

A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.ph

A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php.

A vulnerability was detected in code-projects Blog Site 1.0. The affected element is an unknown function of the file /ad

A security vulnerability has been detected in code-projects Blog Site 1.0. Impacted is the function category_exists of t

A weakness has been identified in code-projects Online Bidding System 1.0. This issue affects the function categoryadd o

A security flaw has been discovered in projectworlds can pass malicious payloads up to 1.0. This vulnerability affects u

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Server-Side Request Forgery in all

A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown

A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functi

A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /a

A flaw has been found in itsourcecode COVID Tracking System 1.0. This impacts an unknown function of the file /admin/?pa

A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This affects an unknown function of the file /ad

A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown fun

A security flaw has been discovered in SourceCodester Pre-School Management System 1.0. Impacted is the function removef

A vulnerability was detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by t

A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3.

A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected is

The Booking Calendar Contact Form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and

The GSheetConnector For Ninja Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing c

The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and

The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to unauthorized mod

The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to fake payment creation in all versions u