2025

A vulnerability has been found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this vulnerability

A vulnerability, which was classified as problematic, was found in withstars Books-Management-System 1.0. Affected is an

A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0. This issue a

For an authenticated end-user the portal may run a script while attempting to display a directory or some file's propert

Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing

A vulnerability classified as problematic was found in withstars Books-Management-System 1.0. This vulnerability affects

A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0. This affects an unkno

A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issu

A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by thi

A vulnerability was found in withstars Books-Management-System 1.0. It has been classified as problematic. Affected is a

A vulnerability was found in opplus springboot-admin 1.0 and classified as critical. This issue affects some unknown pro

A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the

There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt th

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through th

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit t

There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract databa

There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipu

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages

In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking.

NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), p

NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a b

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft h

A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This

python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as <h9999999> in addition to <h1>

A vulnerability, which was classified as problematic, has been found in ChurchCRM 5.16.0. Affected by this issue is some

CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScri

CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be

Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for un

In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability. When a user performs an extraction from an archiv

In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issu

An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.

The Edumall theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.4 via th

The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and

A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shad

A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750

A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750

The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capabili

The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type val

The Integração entre Eduzz e Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to

The Add custom page template plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution i

The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing settin

The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.

The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is v

The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and i

The The Create custom forms for WordPress with a smart form plugin for smart businesses plugin for WordPress is vulnerab

z2d is a pure Zig 2D graphics library. Versions of z2d after `0.5.1` and up to and including `0.6.0`, when writing from

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint.

NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.