2025

A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unk

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can use a reflected cross-site scripting at

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki is vulnerable to reflected XSS in the file uplo

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki vulnerable to remote code execution. An arbitra

Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to 

A vulnerability was found in PHPGurukul Student Record System 3.20. It has been classified as critical. Affected is an u

A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This issue affects so

A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows a

CWE-250: Execution with Unnecessary Privileges

CWE-250: Execution with Unnecessary Privileges

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS allo

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vuln

A vulnerability, which was classified as critical, was found in PHPGurukul Rail Pass Management System 1.0. This affects

A vulnerability, which was classified as critical, has been found in code-projects Product Management System 1.0. Affect

A vulnerability classified as critical was found in code-projects Simple Movie Ticket Booking System 1.0. Affected by th

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, a stored cross-site scripting (XSS) vulnerability was d

Bookgy does not provide for proper authorisation control in multiple areas of the application. This deficiency could all

SQL injection vulnerability in Bookgy. This vulnerability could allow an attacker to retrieve, create, update and delete

SQL injection vulnerability in Bookgy. This vulnerability could allow an attacker to retrieve, create, update and delete

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScrip

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScrip

In Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the GraphQL

An issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to escalate privileges via the

Slims (Senayan Library Management Systems) 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/c

CWE-798: Use of Hard-coded Credentials

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

CWE-427: Uncontrolled Search Path Element

IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting. This v

A vulnerability classified as critical has been found in ScriptAndTools Online-Travling-System 1.0. Affected is an unkno

A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been rated as critical. This issue affect

A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been declared as critical. This vulnerabi

Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and

Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption a

Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs

A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat.

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into us

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitr

A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null c

A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension

An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive

Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user int

A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow c

Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vul

A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been classified as critical. This affects

A vulnerability was found in code-projects Student Information Management System 1.0 and classified as critical. Affecte

A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical. Affected by

DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on al

Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by man

A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0