2025

Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain se

Clickjacking vulnerability in typecho v1.2.1.

WeGIA < 3.2.0 is vulnerable to SQL Injection in query_geracao_auto.php via the query parameter.

WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the v

WeGIA < 3.2.0 is vulnerable to SQL Injection in /funcionario/remuneracao.php via the id_funcionario parameter.

Wegia < 3.2.0 is vulnerable to Cross Site Scripting (XSS) in /geral/documentos_funcionario.php via the id parameter.

Teradata Vantage Editor 1.0.1 is mostly intended for SQL database access and docs.teradata.com access, but provides unin

A vulnerability exists in Algo Edge up to 2.1.1 - a previously used (legacy) component of navify® Algorithm Suite. The

A vulnerability classified as critical has been found in Codezips Gym Management System 1.0. This affects an unknown par

A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been rated as criti

A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been declared as cr

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unkn

Belledonne Communications Linphone-Desktop is vulnerable to a NULL Dereference vulnerability, which could allow a remo

Nedap Librix Ecoreader is missing authentication for critical functions that could allow an unauthenticated attacker

Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an att

A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An

Hard-coded credentials were included as part of the application binary. These credentials served as part of the applica

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 expose clear text credentials in the web portal.

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19 are vulnerable to cross-site request forgery (C

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown p

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. This vulnerability af

A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This

A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20. Affected by t

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability.

A vulnerability classified as critical was found in code-projects Admission Management System 1.0. Affected by this vuln

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Newtec NTC2218, NTC2250, NTC2299

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Newtec/iDire

CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity an

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information di

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow a

CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker t

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style_settings’ parameter i

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘alt’ parameter in all versi

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclos

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists t

The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product whe

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow l

The quote-posttype-plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Author field in all

The Sandbox plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the export_do

The Sandbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'debug' parameter in all versio

The Moving Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi

The MyBookProgress by Stormhill Media plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘book’ p

The Glofox Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'glofox' and 'g

The Proofreading plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all v

The RSS Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link_color’ parameter in

The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati