2025

A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatew

A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functional

A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown funct

A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /

A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the fi

A weakness has been identified in SourceCodester Farm Management System 1.0. The affected element is an unknown function

A vulnerability was identified in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. This issue affects the fu

A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13. This affects an unknown part of the file /

A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13. Affected by this issue is some unknow

A vulnerability was identified in TOZED ZLT T10 T10PLUS_3.04.15. The affected element is an unknown function of the file

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unkno

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init

A vulnerability has been found in aaPanel BaoTa up to 11.2.x. This vulnerability affects unknown code of the file /datab

A flaw has been found in code-projects Responsive Hotel Site 1.0. This affects an unknown part of the file /admin/roomde

The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Call To Actio

The Saphali LiqPay for donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saphali_liqpay'

The CYAN Backup plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation i

The Quick Featured Images plugin for WordPress is vulnerable to SQL Injection via the 'delete_orphaned' function in all

The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Sensitive I

The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized booking note c

The Ovatheme Events Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check

The WPFunnels – The Easiest Funnel Builder For WordPress And WooCommerce To Collect Leads And Increase Sales plugin for

The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mp' parameter in all ver

The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the d

The Contact Form 7 AWeber Extension plugin for WordPress is vulnerable to unauthorized modification of data due to a mis

The HTML Forms – Simple WordPress Forms Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via adm

The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ad

The WP2Social Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all v

The Course Booking System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability

The WPFunnels plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in

The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to SQL Injection

The Groups plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including,

The Simple Downloads List plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capab

Soft Serve is a self-hostable Git server for the command line. In versions prior to 0.10.0, there are several places whe

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 8.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.

Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain pote

Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cr

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a rem

Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 140.0.7339.80 allowed a remote attacker t

KubeVirt is a virtual machine management add-on for Kubernetes. In versions before 1.5.3 and 1.6.1, the virt-handler doe

KubeVirt is a virtual machine management add-on for Kubernetes. In 1.5.0 and earlier, the permissions granted to the vir

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.7.0-beta.0, a logic flaw in the virt-controll

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, due to the peer verification l

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, a vulnerability was discovered

CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / "Who Created F