2025

HumHub is an Open Source Enterprise Social Network. Versions below 1.17.4 have a XSS vulnerability in the Meta-Search fe

TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter.

TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in the /search_results endpoint via the q parameter.

Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical acces

Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical acces

A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file mrbgems

Sourcecodester Medicine Reminder App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Medicine Name" and "Notes

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting

Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Task Title" and "Descr

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This ca

KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed i

The change password functionality at /pet_grooming/admin/change_pass.php in SourceCodester Pet Grooming Management Softw

A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute a

IBM Db2 12.1.0 through 12.1.2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a local user to caus

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gatewa

IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could

IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNI

IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux coul

IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes

Improper handling of malformed Connection Request with the interval set to be 1 (which supposed to be illegal) and the

IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNI

A SQL injection vulnerability exists in the SourceCodester PQMS (Patient Queue Management System) 1.0 in the api_patient

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow unautho

Cross-Site Scripting (XSS) vulnerability in SourceCodester User Account Generator 1.0 allows remote attackers to execute

Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary

AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function _encode_image_bs64. Since the _encode_image

A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /a

An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data an

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the text editor feature of the Onlook web application 0.2

An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknow

An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file src/main/java/com/

There is an arbitrary file download vulnerability in GuoMinJim PersonManage thru commit 5a02b1ab208feacf3a34fc123c938116

A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a us

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an admi

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

A cross-site scripting (XSS) vulnerability has been reported to affect File Station 5. If a remote attacker gains a user

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an admin

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

A NULL pointer dereference vulnerability has been reported to affect several product versions. If a remote attacker gain

A vulnerability was determined in DedeBIZ up to 6.3.2. Affected by this vulnerability is an unknown functionality of the

A vulnerability was found in DedeBIZ up to 6.3.2. Affected is an unknown function of the file /admin/freelist_main.php.