2025

A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_m

The Stray Random Quotes WordPress plugin through 1.9.9 does not sanitise and escape a parameter before outputting it bac

The Zarinpal Paid Download WordPress plugin through 2.3 does not properly validate uploaded files, allowing high privile

The Zarinpal Paid Download WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it ba

Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery (SSRF) due to improper parsi

A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vuln

A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affe

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affe

A vulnerability classified as problematic was found in code-projects Real Estate Property Management System 1.0. Affecte

NetVision Information ISOinsight has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote att

School Affairs System from Quanxun has an Exposure of Sensitive Information, allowing unauthenticated attackers to view

Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in

A vulnerability classified as problematic has been found in code-projects Real Estate Property Management System 1.0. Af

A vulnerability was found in SourceCodester Image Compressor Tool 1.0. It has been rated as problematic. This issue affe

A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. Th

A vulnerability was found in Mayuri K Employee Management System up to 192.168.70.3 and classified as critical. Affected

A vulnerability has been found in SourceCodester Food Menu Manager 1.0 and classified as critical. Affected by this vuln

SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a public

Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests

The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an aut

SAP Commerce, by default, sets certain cookies with the SameSite attribute configured to None (SameSite=None). This incl

SAP Commerce (Backoffice) uses the deprecated X-FRAME-OPTIONS header to protect against clickjacking. While this protect

The ABAP Build Framework in SAP ABAP Platform allows an authenticated attacker to gain unauthorized access to a specific

SAP GUI for Windows & RFC service credentials are incorrectly stored in the memory of the program allowing an unauthenti

SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose information about deplo

The User Account and Authentication service (UAA) for SAP HANA extended application services, advanced model (SAP HANA X

SAP BusinessObjects Platform (BI Launchpad) does not sufficiently handle user input, resulting in Cross-Site Scripting (

SAP NetWeaver Server ABAP allows an unauthenticated attacker to exploit a vulnerability that causes the server to respon

Cached values belonging to the SAP OData endpoint in SAP Fiori for SAP ERP could be poisoned by modifying the Host heade

Due to missing authorization check, an authenticated attacker could call a remote-enabled function module which allows t

Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an authenticated attacker cou

Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an unauthenticated attacker c

A vulnerability, which was classified as critical, was found in Lumsoft ERP 8. Affected is the function DoUpload/DoWebUp

Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allo

SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scriptin

A vulnerability, which was classified as problematic, has been found in code-projects Police FIR Record Management Syste

A vulnerability classified as critical was found in code-projects Vehicle Parking Management System 1.0. This vulnerabil

Lemmy, a link aggregator and forum for the fediverse, is vulnerable to server-side request forgery via a dependency on a

A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. This affects an unknown part

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by t

Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including

The ZOO-Project is an open source processing platform. The ZOO-Project Web Processing Service (WPS) Server contains a Cr

The ZOO-Project is an open source processing platform. A reflected Cross-Site Scripting vulnerability exists in the ZOO-

Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final

A vulnerability was found in CampCodes School Management Software 1.0. It has been declared as problematic. Affected by

A vulnerability was found in ESAFENET CDG 5.6.3.154.205_20250114. It has been classified as critical. Affected is an unk

A vulnerability was found in Allims lab.online up to 20250201 and classified as critical. This issue affects some unknow

A vulnerability has been found in Pix Software Vivaz 6.0.10 and classified as critical. This vulnerability affects unkno

MicroDicom DICOM Viewer version 2024.03 fails to adequately verify the update server's certificate, which could make it