2025

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerabilit

Cross-Site Request Forgery (CSRF) vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Stored XSS.This iss

Dell PowerScale InsightIQ, version 5.2, contains an uncontrolled resource consumption vulnerability. An unauthenticated

Dell PowerScale InsightIQ, versions 5.0 through 5.2, contains an improper privilege management vulnerability. An unauthe

Dell PowerScale OneFS, versions 9.4.0.0 through 9.9.0.0, contains an uncontrolled resource consumption vulnerability. A

Missing Authorization vulnerability in Automattic Jetpack Debug Tools.This issue affects Jetpack Debug Tools: from n/a b

Missing Authorization vulnerability in Tosin Oguntuyi Tours tours.This issue affects Tours: from n/a through <= 1.0.0.

A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects a

A vulnerability, which was classified as critical, has been found in Campcodes Sales and Inventory System 1.0. Affected

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. Affected by this vulnerabi

Vyper is the Pythonic Programming Language for the Ethereum Virtual Machine. In versions up to and including 0.4.2rc1, t

Vyper is the Pythonic Programming Language for the Ethereum Virtual Machine. In versions up to and including 0.4.2rc1, `

Undici is an HTTP/1.1 client for Node.js. Prior to versions 5.29.0, 6.21.2, and 7.5.0, applications that use undici to i

FluxBB 1.5.11 is vulnerable to Cross Site Scripting (XSS) in via the Forum Description Field in admin_forums.php.

The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebA

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknow

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects

A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnera

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Con

There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XML_Serialize() when

There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolE

There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize() when using the Symb

There is a memory corruption vulnerability due to an out of bounds write in CheckPins() when using the SymbolEditor in N

There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64() when using the Symbol

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap a

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by t

A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected

powertip.ts in Lila (for Lichess) before ab0beaf allows XSS in some applications because of an innerHTML usage pattern i

In DOMPurify through 3.2.5 before 6bc6d60, scripts/server.js does not ensure that a pathname is located under the curren

IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to

Mattermost versions 10.5.x <= 10.5.3, 9.11.x <= 9.11.11 fail to check `RestrictSystemAdmin` setting if user doesn't have

Mattermost versions 10.5.x <= 10.5.2, 9.11.x <= 9.11.11 failed to properly verify a user's permissions when accessing gr

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kern

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kern

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kern

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kern

A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13. Affec

A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue

A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/change_

A vulnerability classified as critical was found in PHPGurukul Apartment Visitors Management System 1.0. This vulnerabil

A vulnerability classified as critical has been found in PHPGurukul Directory Management System 2.0. This affects an unk

There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using t

An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command an

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via t

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the vehiclename, modeln

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/add-brand.php via

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit-brand.php?bid={bra

A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this