2025

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them i

Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting (XSS).

Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allo

Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the name

Car-Booking-System-PHP v.1.0 is vulnerable to Cross Site Scripting (XSS) in /carlux/booking.php.

Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /orders.php.

Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit_product.php?id=1.

Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_customer.php.

Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_vendor.php.

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an attacker to access unauthorized content

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards t

School Management System PHP v1.0 is vulnerable to Cross Site Scripting (XSS) in /login.php via the password parameter.

Simple User Management System with PHP-MySQL v1.0 is vulnerable to Cross-Site Scripting (XSS) via the Profile Section. T

An issue in Raspberry Pi Imager version 1.9.6 for Windows, affecting its OS customization feature. The imager's 'public-

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.

NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.

An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function

Missing Authorization vulnerability in d3wp WP Snow Effect wp-snow-effect allows Accessing Functionality Not Properly Co

A security flaw has been discovered in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This affects

EasyFlow .NET and EasyFlow AiNet developed by Digiwin has a SQL Injection vulnerability, allowing authenticated remote a

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of

A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function delet

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unkn

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/v

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality o

A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function

A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Affected by this vulnerability i

A security flaw has been discovered in code-projects Simple Online Hotel Reservation System 2.0. This affects an unknown

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an u

The kallyas theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in a

The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Arbitrary File Re

The Qi Blocks plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.4.3. T

The Employee Spotlight – Team Member Showcase & Meet the Team Plugin plugin for WordPress is vulnerable to Stored Cross-

The Folderly plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability c

The WP Discourse plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5.9.

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the Subscriptions Manager in all versions up to

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug

The Schema Scalpel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions

The Flying Images: Optimize and Lazy Load Images for Faster Page Speed plugin for WordPress is vulnerable to Stored Cros

The List category posts plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including,

The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Missing Authorization in versions up to, and includin

The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all

Blogs in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.

The Inactive Logout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ina_redirect_page_individ

The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vul

The Document Library Lite plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and includ

The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported ver

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped

Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions