2025

A vulnerability, which was classified as problematic, has been found in code-projects Employee Record System 1.0. Affect

A vulnerability classified as critical was found in code-projects Employee Record System 1.0. Affected by this vulnerabi

A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects

A vulnerability was found in BeamCtrl Airiana up to 11.0. It has been declared as problematic. This vulnerability affect

A vulnerability was found in projectworlds Hospital Database Management System 1.0. It has been classified as critical.

The Posts per Cat [Unmaintained plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ppc'

A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical. Affected by this issue is

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this

A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. Affected is an

A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. T

A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability

Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reb

IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection. A remote attacker could inject maliciou

A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects

A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected b

A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affecte

Zulip is an open-source team chat application. Starting in version 10.0 and prior to version 10.3, the "Who can create p

A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.as

A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. This vulnerab

Execution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions 10.97

A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. This affec

A vulnerability, which was classified as critical, has been found in itsourcecode Placement Management System 1.0. Affec

A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulne

A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an un

Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser enc

Auth0-PHP provides the PHP SDK for Auth0 Authentication and Management APIs. Starting in version 8.0.0-BETA1 and prior t

A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue aff

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this

DumbDrop, a file upload application that provides an interface for dragging and dropping files, has a DOM cross-site scr

IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in f

A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 2.0. Affect

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this i

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by thi

Spotipy is a Python library for the Spotify Web API. As of commit 4f5759dbfb4506c7b6280572a4db1aabc1ac778d, using `pull_

Horilla is a free and open source Human Resource Management System (HRMS). In versions up to and including 1.3, an attac

Atheos is a self-hosted browser-based cloud IDE. Prior to v602, similar to GHSA-rgjm-6p59-537v/CVE-2025-22152, the `$tar

Emlog is an open source website building system. Emlog Pro prior to version 2.5.10 contains a file upload vulnerability.

Emlog is an open source website building system. Version 2.5.13 has a stored cross-site scripting vulnerability that all

Emlog is an open source website building system. In versions up to and including 2.5.9, SQL injection occurs because the

Emlog is an open source website building system. Versions 2.5.13 and prior have a deserialization vulnerability. A user

Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

Alchemy's Modular Account is a smart contract account that is compatible with ERC-4337 and ERC-6900. In versions on the

The WP-PManager WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL statement

The WP-PManager WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, which could a

The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL statemen

The Ninja Pages WordPress plugin through 1.4.2 does not sanitise and escape some of its settings, which could allow high