2025

The CC Child Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'child_pages' shortcode in

The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restrict

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to missing authorizatio

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authorization

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Attachment upl

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authenticated

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Unauthenticate

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Uploaded attac

An issue was discovered in allauth-django before 65.13.0. Both Okta and NetIQ were using preferred_username as the ident

An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as is_active=False after having handed tok

A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secr

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated us

Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certifica

An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the T

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure.  This vulnerability is e

A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This vulnerability a

A vulnerability was detected in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This affects

A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue is some unknown functi

A weakness has been identified in Shiguangwu sgwbox N3 2.0.25. Affected by this vulnerability is an unknown functionalit

LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could all

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the ful

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific l

Student Learning Assessment and Support System developed by JHENG GAO has a Exposure of Sensitive Information vulnerabil

A security flaw has been discovered in Shiguangwu sgwbox N3 2.0.25. Affected is an unknown function of the file /usr/sbi

A vulnerability was identified in Shiguangwu sgwbox N3 2.0.25. This impacts an unknown function of the file /usr/sbin/ht

In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse OpenJ9 consumers of OMR

The URL Shortify WordPress plugin before 1.11.4 does not sanitise and escape a parameter before outputting it back in t

The URL Shortify WordPress plugin before 1.11.3 does not sanitize and escape a parameter before outputting it back in t

The Royal Addons for Elementor WordPress plugin before 1.7.1037 does not have proper authorisation, allowing unauthenti

A vulnerability was determined in Shiguangwu sgwbox N3 2.0.25. This affects an unknown function of the component SHARESE

A vulnerability was found in Shiguangwu sgwbox N3 2.0.25. The impacted element is an unknown function of the file /eshel

In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.

A vulnerability has been found in Shiguangwu sgwbox N3 2.0.25. The affected element is an unknown function of the file /

A flaw has been found in Smartbit CommV Smartschool App up to 10.4.4. Impacted is an unknown function of the component b

The Lightweight Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `lightweigh

A security vulnerability has been detected in Municorn FAX App 3.27.0 on Android. This vulnerability affects unknown cod

A weakness has been identified in atlaszz AI Photo Team Galleryit App 1.3.8.2 on Android. This affects an unknown part o

A security flaw has been discovered in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3

A vulnerability was identified in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. Aff

A vulnerability was determined in SamuNatsu HaloBot up to 026b01d4a896d93eaaf9d5163a287dc9f267515b. Affected is the func

A vulnerability was found in ketr JEPaaS up to 7.2.8. This impacts the function readAllPostil of the file /je/postil/pos

A vulnerability has been found in Ugreen DH2100+ up to 5.3.0. This affects an unknown function of the component USB Hand

openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client to cause a server SIGSEG

A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the file /authenticatio

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authen

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files