2025

A vulnerability has been found in iteaj iboot 物联网网关 1.1.3 and classified as problematic. This vulnerability affects unkn

A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3. This affects an unknown part

A vulnerability, which was classified as critical, has been found in godcheese/code-projects Nimrod 0.8. Affected by thi

A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8. Affected by this vulnerability i

LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered

mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that impl

Plain Craft Launcher (PCL) is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause a denial of s

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer un

In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause

A vulnerability classified as critical was found in Kenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 1.0. Affected b

A vulnerability classified as problematic has been found in fumiao opencms up to a0fafa5cff58719e9b27c2a2eec204cc165ce14

A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been rated as critical. This issue affec

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected

A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Aff

A vulnerability, which was classified as critical, was found in PHPGurukul Men Salon Management System 1.0. Affected is

A vulnerability, which was classified as critical, has been found in PHPGurukul Men Salon Management System 1.0. This is

A vulnerability classified as critical was found in PHPGurukul Men Salon Management System 1.0. This vulnerability affec

Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uplo

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by

Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certai

The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affecte

In chainmaker-go (aka ChainMaker) before 2.4.0, when making frequent updates to a node's configuration file and restarti

In chainmaker-go (aka ChainMaker) before 2.3.6, multiple updates to a single node's configuration can cause other normal

FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a ma

A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affec

A vulnerability has been found in 1902756969/code-projects IKUN_Library 1.0 and classified as problematic. This vulnerab

In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., *rdlen=n

A vulnerability, which was classified as critical, was found in code-projects Patient Record Management System 1.0. This

Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in

A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash whe

A vulnerability, which was classified as critical, has been found in code-projects Patient Record Management System 1.0.

In Zammad 6.4.x before 6.4.2, there is information exposure. Only agents should be able to see and work on shared articl

In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security. When changing their two factor a

In Zammad 6.4.x before 6.4.2, SSRF can occur. Authenticated admin users can enable webhooks in Zammad, which are trigger

In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to f

Net::Xero 0.044 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptograph

WebService::Xero 0.11 and earlier for Perl uses the rand() function as the default source of entropy, which is not crypt

Net::Dropbox::API 1.9 and earlier for Perl uses the rand() function as the default source of entropy, which is not crypt

Web::API 2.8 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographica

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values.  String::Random defaults to Perl's bui

A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type bu

A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. Affected by this iss

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is a

A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue

The Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress is vulnerable to arbitrary file moving due t