2025

Exposure of Private Personal Information to an Unauthorized Actor (CWE-359) in the Command Centre Server allows a privil

Sakai is a Collaboration and Learning Environment. Prior to versions 23.5 and 25.0, EncryptionUtilityServiceImpl initial

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JWE zip=DEF

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.2, OpenBao's audit log did not

FastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link i

Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 20

A reflected cross-site scripting (XSS) vulnerability, resulting from a regression, has been identified in Liferay Porta

A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file

Software which sets SO_REUSEPORT_LB on a socket and then connects it to a host will not directly observe any problems.

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of othe

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an act

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier a

Nautobot Single Source of Truth (SSoT) is an app for Nautobot. Prior to version 3.10.0, an unauthenticated attacker coul

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor wit

Missing Authorization vulnerability in Sovlix MeetingHub meetinghub.This issue affects MeetingHub: from n/a through <= 1

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End User

Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-re

Missing Authorization vulnerability in WPXPO WowRevenue revenue.This issue affects WowRevenue: from n/a through <= 1.2.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel WP Trave

Insertion of Sensitive Information Into Sent Data vulnerability in ThemeRuby Easy Post Submission easy-post-submission a

Cross-Site Request Forgery (CSRF) vulnerability in impleCode Product Catalog Simple post-type-x.This issue affects Produ

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Tab Ul

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez

Missing Authorization vulnerability in Horea Radu One Page Express Companion one-page-express-companion.This issue affec

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo.This issu

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event p

Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a

Insertion of Sensitive Information Into Sent Data vulnerability in Blockspare Blockspare blockspare allows Retrieve Embe

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonathan Jernigan

Missing Authorization vulnerability in Made Neat Acknowledgify acknowledgify.This issue affects Acknowledgify: from n/a

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom.

Missing Authorization vulnerability in POSIMYTH UiChemy uichemy.This issue affects UiChemy: from n/a through <= 4.0.0.

Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") UPC/EAN/GTIN Code Generator upc-ean

Missing Authorization vulnerability in VeronaLabs WP SMS wp-sms.This issue affects WP SMS: from n/a through <= 7.0.1.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tattersoftware WP

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allow

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NIKITAS GEORGOPOUL

Cross-Site Request Forgery (CSRF) vulnerability in John James Jacoby WP Media Categories wp-media-categories allows Cros

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zoefff Werk aan de