2025

A vulnerability, which was classified as critical, was found in code-projects Simple Pizza Ordering System 1.0. Affected

A vulnerability, which was classified as critical, has been found in code-projects Simple Pizza Ordering System 1.0. Thi

A vulnerability classified as critical was found in code-projects Simple Pizza Ordering System 1.0. This vulnerability a

pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and n

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.3.6, all versions starting

A vulnerability classified as critical has been found in code-projects Simple Pizza Ordering System 1.0. This affects an

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been rated as critical. Affected by

An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot parameter in index.php. Th

An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscm

An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp for

A path traversal vulnerability exists in the Karel IP1211 IP Phone's web management panel. The /cgi-bin/cgiServer.exx en

A path traversal vulnerability exists in multiple models of Selea Targa IP OCR-ANPR cameras, including iZero, Targa 512,

A server-side request forgery (SSRF) vulnerability exists in multiple Selea Targa IP OCR-ANPR camera models, including i

An OS command injection vulnerability exists in MiniDVBLinux version 5.4 and earlier. The system’s web-based management

An information disclosure vulnerability exists in Aquatronica Controller System firmware versions <= 5.1.6 and web inter

A PHP object injection vulnerability exists in SugarCRM versions prior to 6.5.24, 6.7.13, 7.5.2.5, 7.6.2.2, and 7.7.1.0

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1.0 before 16.11.5, all versions starting fr

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions from 7.10 prior before 16

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been declared as critical. Affected

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. Affecte

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0 and classified as critical. This issue affec

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A

RISC Zero is a general computing platform based on zk-STARKs and the RISC-V microarchitecture. Due to a missing constrai

An issue in redoxOS kernel before commit 5d41cd7c allows a local attacker to cause a denial of service via the `setitime

An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass

A vulnerability has been found in SourceCodester Online Hotel Reservation System 1.0 and classified as critical. This vu

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by th

A vulnerability classified as problematic was found in code-projects Responsive Blog 1.0. Affected by this vulnerability

Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.jso

PowSyBl (Power System Blocks) is a framework to build power system oriented software. In com.powsybl:powsybl-iidm-criter

There are multiple unauthorized remote command execution vulnerabilities in the H3C ER2200G2, ERG2-450W, ERG2-1200W, ERG

A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an un

A vulnerability was found in itsourcecode Employee Record Management System 1.0. It has been rated as critical. This iss

A vulnerability was found in code-projects Responsive Blog 1.0/1.12.4/3.3.4. It has been declared as problematic. This v

A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in ce

A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure. While it require

Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to execute arbitrary code via th

brplot v420.69.1 contains a Null Pointer Dereference (NPD) vulnerability in the br_dagens_handle_once function of its da

In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is com

A vulnerability was found in SourceCodester Advance Charity Management System 1.0. It has been classified as critical. T

A vulnerability was found in SourceCodester My Food Recipe 1.0 and classified as problematic. Affected by this issue is

Cross-Site Request Forgery (CSRF) vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows Privilege

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design WP R

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in thanhtungtnt Video

Missing Authorization vulnerability in enguerranws Import YouTube videos as WP Posts import-youtube-videos-as-wp-post al

Cross-Site Request Forgery (CSRF) vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Cro

Cross-Site Request Forgery (CSRF) vulnerability in Creative-Solutions Creative Contact Form sexy-contact-form allows Sto

Cross-Site Request Forgery (CSRF) vulnerability in Esselink.nu Esselink.nu Settings esselinknu-settings allows Reflected

Cross-Site Request Forgery (CSRF) vulnerability in vgstef WP User Stylesheet Switcher wp-user-stylesheet-switcher allows

Cross-Site Request Forgery (CSRF) vulnerability in devfelixmoira Knowledge Base – Knowledge Base Maker knowledge-base-ma