2025

A vulnerability, which was classified as critical, has been found in Campcodes Online Recruitment Management System 1.0.

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerabili

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

The ApprovedRevs extension for MediaWiki is vulnerable to stored XSS in multiple locations where system messages are ins

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications an

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications an

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications an

Natours is a Tour Booking API. The attacker can easily take over any victim account by injecting an attacker-controlled

A vulnerability has been discovered in the firmware of Paxton Paxton10 before 4.6 SR6. The firmware file, rootfs.tar.gz,

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP p

In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 13

Insufficient security mechanisms for created containers in educoder challenges v1.0 allow attackers to execute arbitrary

employee record management system in php and mysql v1 was discovered to contain a SQL injection vulnerability via the lo

fblog through 983bede allows account takeover via the password reset feature because SERVER_NAME is not configured and t

JobCenter through 7e7b0b2 allows account takeover via the password reset feature because SERVER_NAME is not configured a

flask-boilerplate through a170e7c allows account takeover via the password reset feature because SERVER_NAME is not conf

Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19,

An issue was discovered in L2 in Samsung Mobile Processor and Modem Exynos 2400 and Modem 5400. The lack of a length che

A vulnerability classified as problematic has been found in CodeAstro Online Movie Ticket Booking System 1.0. This affec

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been rated as critical. Affected by this is

Mescius ActiveReports.NET TypeResolutionService Deserialization of Untrusted Data Remote Code Execution Vulnerability. T

Mescius ActiveReports.NET ReadValue Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerab

Marvell QConvergeConsole getDriverTmpPath Directory Traversal Information Disclosure Vulnerability. This vulnerability a

Marvell QConvergeConsole decryptFile Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows r

Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerabilit

Marvell QConvergeConsole compressFirmwareDumpFiles Directory Traversal Information Disclosure Vulnerability. This vulner

Marvell QConvergeConsole compressDriverFiles Directory Traversal Information Disclosure Vulnerability. This vulnerabilit

Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability

Marvell QConvergeConsole saveNICParamsToFile Directory Traversal Arbitrary File Write Vulnerability. This vulnerability

Marvell QConvergeConsole restoreESwitchConfig Directory Traversal Information Disclosure Vulnerability. This vulnerabili

Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability. This vulnerability

Marvell QConvergeConsole deleteAppFile Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability all

Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability. This vulnerability

Marvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability. This vulnerability al

Marvell QConvergeConsole getFileUploadSize Directory Traversal Information Disclosure Vulnerability. This vulnerability

Marvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows r

Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulne

MongoDB Server's mongos component can become unresponsive to new connections due to incorrect handling of incomplete dat

An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization d

MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This c

An issue has been identified in MongoDB Server where unredacted queries may inadvertently appear in server logs when cer

GStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows

A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust th

The WikiCategoryTagCloud extension is vulnerable to reflected XSS via the linkstyle attribute, which is improperly conca

Hashview 0.8.1 allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a r

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Directory Traversal vulnerability in dagster-webserver Dagster thru 1.5.11 allows remote attackers to obtain sensitive i

A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some