2025

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree P

A vulnerability was found in aizuda snail-job up to 1.6.0. Affected by this vulnerability is the function QLExpressEngin

A vulnerability has been found in gmg137 snap7-rs up to 1.142.1. Affected is the function snap7_rs::client::S7Client::as

A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the

A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of th

A security vulnerability has been detected in itsourcecode COVID Tracking System 1.0. The impacted element is an unknown

A weakness has been identified in itsourcecode COVID Tracking System 1.0. The affected element is an unknown function of

A security flaw has been discovered in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/DhcpLis

A vulnerability was identified in Campcodes Supplier Management System 1.0. This issue affects some unknown processing o

A vulnerability was determined in code-projects Student File Management System 1.0. This vulnerability affects unknown c

A vulnerability was found in code-projects Student File Management System 1.0. This affects an unknown part of the file

A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown func

A flaw has been found in DecoCMS Mesh up to 1.0.0-alpha.31. Affected by this vulnerability is the function createTool of

A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown function of the c

A weakness has been identified in Tenda AC20 16.03.08.12. This affects the function httpd of the file /goform/openSchedW

A security flaw has been discovered in Tenda AC20 16.03.08.12. The impacted element is the function formSetRebootTimer o

A vulnerability was identified in Tenda AC20 16.03.08.12. The affected element is the function formSetPPTPUserList of th

A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the fil

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of

A vulnerability has been found in MartialBE one-hub up to 0.14.27. This vulnerability affects unknown code of the file d

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakesho

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown fun

A security vulnerability has been detected in DedeBIZ up to 6.5.9. Affected by this vulnerability is an unknown function

A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /ad

A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown functio

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting

The Addon Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to

In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take adva

The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the `post_args` and `topic_args` parame

Exim before 4.99.1, with certain non-default rate-limit configurations, allows a remote heap-based buffer overflow becau

A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown functio

A vulnerability was found in code-projects Simple Attendance Record System 2.0. The affected element is an unknown funct

A vulnerability has been found in code-projects Computer Laboratory System 1.0. Impacted is an unknown function of the f

A flaw has been found in code-projects Computer Laboratory System 1.0. This issue affects some unknown processing of the

A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function o

A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file

A security vulnerability has been detected in itsourcecode Online Pet Shop Management System 1.0. This issue affects som

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component htt

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown proc

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unkn

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the

The a3 Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including,

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to St

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data’ parameter in all ve

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to to Information Disclosure due to

The TI WooCommerce Wishlist plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2

The WPS Visitor Counter WordPress plugin through 1.4.8 does not escape the $_SERVER['REQUEST_URI'] parameter before outp

The Livemesh SiteOrigin Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Hero