2025

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.

NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.

NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration.

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.

An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP verification process via a craft

ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web

HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain acce

Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tik

Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. Accordi

An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the syst

A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted ur

An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url

Halo is an open source website building tool. Prior to version 2.20.13, a vulnerability in Halo allows attackers to bypa

In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab

In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible

In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs

Dify is an open-source LLM app development platform. Prior to version 0.6.12, a normal user is able to access and modify

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they a

A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users'

A flaw was found in Moodle. Additional checks were required to prevent users from deleting course sections they did not

A flaw was found in Moodle. The return URL in the policy tool required additional sanitizing to prevent a reflected Cros

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default

A flaw was found in Moodle. Insufficient capability checks made it possible for a user enrolled in a course to access so

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to pr

A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CS

A flaw was found in Moodle. This vulnerability allows unauthorized users to access and view RSS feeds due to insufficien

A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log

A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student

A security vulnerability was discovered in Moodle that allows some users to access sensitive information about other stu

A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about s

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from vers

A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without

A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—i

Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.4 and CO2Scope <= 1.3.4 allows remote authenticated at

A security vulnerability was discovered in Moodle that allows students to enroll themselves in courses without completin

An issue in the Printer Manager Systm of Entrust Corp Printer Manager D3.18.4-3 and below allows attackers to execute a

Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to c

An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS 

The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the 

The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to unauthorized acc

IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged

The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Board WordPress Theme,

The JobSearch WP Job Board plugin for WordPress is vulnerable to authentication bypass in all versions up to, and includ

The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 v

The 1 Decembrie 1918 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi

The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privileg

Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly C