2025

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText™ Digital

A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected

Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed.

OneVision Workspace before WS23.1 SR1 (build w31.040) allows arbitrary Java EL execution.

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected

A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.

In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, a

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.5.7, 0.4.

DIFY is an open-source LLM app development platform. Prior to version 1.3.0, a clickjacking vulnerability was found in t

DevExpress before 23.1.3 allows AsyncDownloader SSRF.

DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data.

DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms.

SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute

The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS. NOTE: C

A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulne

A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an un

Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastro Bus Tick

Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of Output

Dell PowerProtect Data Manager Reporting, version(s) 19.16, 19.17, 19.18, contain(s) an Improper Neutralization of Speci

Dell PowerProtect Data Manager Reporting, version(s) 19.17, contain(s) an Incorrect Use of Privileged APIs vulnerability

Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the t

A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue aff

A vulnerability was found in web-arena-x webarena up to 0.2.0. It has been declared as critical. This vulnerability affe

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. Thi

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this

IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the at

The multiScan and picoScan are vulnerable to a denial-of-service (DoS) attack. A remote attacker can exploit this vulner

A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af447

A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97

A vulnerability classified as problematic was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f16

A vulnerability classified as critical has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as cr

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manip

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as critical. Affected

A vulnerability was found in playeduxyz PlayEdu 开源培训系统 up to 1.8 and classified as problematic. This issue affects some

A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/6.0.3 and classified as problematic. This vulnerability affe

Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when inst

Missing Authorization vulnerability in SeventhQueen Kleo kleo.This issue affects Kleo: from n/a through < 5.4.4.

The device’s passwords have not been adequately salted, making them vulnerable to password extraction attacks.

A remote unauthenticated attacker may be able to change the IP adress of the device, and therefore affecting the availab

A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). Affected by this vuln

EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been crea

A vulnerability classified as critical has been found in youyiio BeyongCms 1.6.0. Affected is an unknown function of the

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been rated as critical. This issue

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been declared as critical. This vu

A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB. It has been classified as problematic. This affects th

The WordPress Tag, Category, and Taxonomy Manager WordPress plugin before 3.30.0 does not sanitise and escape some of i