2025

An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer

Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted acc

A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in  spacewalk-java allows

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Student Study Center Management System 1

A vulnerability classified as critical was found in PHPGurukul Company Visitor Management System 1.0. This vulnerability

Fess is a deployable Enterprise Search Server. Prior to version 14.19.2, the createTempFile() method in org.codelibs.fes

Radashi is a TypeScript utility toolkit. Prior to version 12.5.1, the set function within the Radashi library is vulnera

A vulnerability classified as critical has been found in PHPGurukul Online Nurse Hiring System 1.0. This affects an unkn

A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been rated as critical. Affected by

A vulnerability was found in D-Link DI-8100 up to 20250523. It has been classified as critical. Affected is the function

A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical. This issue affects some unknown proces

Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the t

vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers'

The installer in SIGB PMB before and fixed in v.8.0.1.2 allows remote code execution.

Gibbon before 29.0.00 allows CSRF.

A vulnerability has been found in PHPGurukul Small CRM 3.0 and classified as critical. This vulnerability affects unknow

A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affect

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an

A vulnerability was found in FreeFloat FTP Server 1.0.0. It has been classified as critical. This affects an unknown par

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized modifi

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored

In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.

SIGB PMB before 8.0.1.2 allows SQL injection.

A vulnerability was found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this issue is some unkno

IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials

A vulnerability has been found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this vulnerability

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.0. Affected is an unknown funct

A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0.0. This issue affects some

A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects un

A vulnerability classified as critical has been found in D-Link DCS-5020L 1.01_B2. This affects the function websReadEve

A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0. It has been rated as critical. Affected b

A vulnerability was found in projectworlds Responsive E-Learning System 1.0. It has been declared as critical. Affected

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML attrib

A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been classified as critical. Affec

A vulnerability was found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This issue aff

A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vuln

A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. Th

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.

A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functio

A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affecte

A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the fun

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by th

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects th

For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.

Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path.

A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus t