2025

A vulnerability has been found in CodeAstro Patient Record Management System 1.0 and classified as critical. Affected by

A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as problematic. This vu

A vulnerability, which was classified as problematic, was found in SourceCodester Best Salon Management System 1.0. This

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Salon Management System 1.0.

Kestra is an event-driven orchestration platform. The error message in execution "Overview" tab is vulnerable to stored

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Se

FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetr

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

A vulnerability classified as problematic was found in SourceCodester Best Salon Management System 1.0. Affected by this

A vulnerability classified as problematic has been found in SourceCodester Best Salon Management System 1.0. Affected is

An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the gara

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Unauthorized Access

Insufficient Logging vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Data Leakage Attacks

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Unauthorized Access

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

The CheckUser extension’s Special:Investigate interface is vulnerable to reflected XSS due to improper escaping of certa

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as problematic. This iss

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vul

Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had "Write" auto-approved, an attacker

Better Auth is an authentication and authorization library for TypeScript. An open redirect has been found in the origin

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.1

In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.7, and 9.1.10 and Splunk Cloud Platform versions below 9.3.2411.10

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, a low-privileged user that does not hold the "admin

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.1

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.10

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.10

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, a user who holds a role that contains the high-priv

In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform versions below 9.3.2411.103

IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to ob

An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the bb

An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via thebbs

An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the in

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This a

A vulnerability, which was classified as critical, was found in Campcodes Online Recruitment Management System 1.0. Affe

giscus is a commenting system powered by GitHub Discussions. A bug in giscus' discussions creation API allowed an unauth

WeGIA is a web manager for charitable institutions. The Wegia server has a vulnerability that allows excessively long HT

WeGIA is a web manager for charitable institutions. The Wegia server has a vulnerability that allows excessively long HT

WeGIA is a web manager for charitable institutions. An SQL Injection vulnerability was identified in the /html/funcionar

WeGIA is a web manager for charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in the

WeGIA is a web manager for charitable institutions. An XSS Injection vulnerability was identified in novo_memorando.php.

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified

IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with access

IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another use

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler i

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which l

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strf

An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, whi