CVE-2021-2456

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2026-2025

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Course Registration System versions up to 3.1 Description A flaw exists in PHPGurukul Online Course Registration System that allows for SQL injection. The issue is located in the /enroll.php file. Manipulating the studentregn...

PT-2026-1983

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Course Registration System versions prior to 3.1 Description A flaw exists in PHPGurukul Online Course Registration System that allows for SQL injection. The issue is located in the file...

PHPGurukul Online Course Registration 代码问题漏洞

PHPGurukul Online Course Registration is an online course registration system from PHPGurukul, Inc. A code issue vulnerability exists in PHPGurukul Online Course Registration 3.1 and earlier versions, which stems from incorrect manipulation of the parameter photo in the component student...

H-ui.admin 代码问题漏洞

H-ui.admin is a website backend template by jackying personal developer. A code issue vulnerability exists in H-ui.admin 3.1 and earlier versions, which stems from an incorrect operation of the library file /lib/webuploader/0.1.5/server/preview.php, which may result in arbitrary file uploads...

EUVD-2026-0014

A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used...

PT-2026-1011

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Course Registration versions up to 3.1 Description A flaw exists in PHPGurukul Online Course Registration that results in missing authorization. This issue affects an unknown function and allows for remote exploitation. The...

PHPGurukul Online Course Registration 安全漏洞

PHPGurukul Online Course Registration is an online course registration system from PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Online Course Registration 3.1 and prior versions that stems from a lack of authorization and could lead to a remote attack...

CVE-2025-58951

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in smartcms Advance Seat Reservation Management for WooCommerce scw-seat-reservation allows SQL Injection.This issue affects Advance Seat Reservation Management for WooCommerce: from n/a through = 3.1...

@tinacms/app (>=2.3.12 <=2.3.15), @tinacms/cli (>=2.0.0 <=2.0.3) +1 more potentially affected by CVE-2025-68278 via tinacms (>=3.0.0 <=3.1.0)

tinacms NPM version =3.0.0, =2.3.12, =2.0.0, =0.1.12, =0.1.15 Source cves: CVE-2025-68278 Source advisory: SNYK:JS-TINACMS-14535449...

CVE-2025-58951 WordPress Advance Seat Reservation Management for WooCommerce plugin <= 3.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in smartcms Advance Seat Reservation Management for WooCommerce scw-seat-reservation allows SQL Injection.This issue affects Advance Seat Reservation Management for WooCommerce: from n/a through = 3.1...

CVE-2025-58951

The CVE-2025-58951 entry concerns a SQL Injection vulnerability in the WordPress plugin “Advance Seat Reservation Management for WooCommerce” (scw-seat-reservation), affecting versions from n/a through 3.1. Root cause: improper neutralization of special elements used in SQL commands. Impact is de...

CVE-2025-12834

The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failuremessage' parameter in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

Fedora: Security Advisory (FEDORA-2025-f7d8e75d34)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15773-1 cheat-4.4.2-3.1 on GA media

These are all security issues fixed in the cheat-4.4.2-3.1 package on the GA media of openSUSE Tumbleweed...

git-bug-0.10.1-3.1 on GA media (moderate)

git-bug-0.10.1-3.1 on GA media Announcement ID: openSUSE-SU-2025:15771-1 Rating: moderate Cross-References: CVE-2025-47913 CVE-2025-47914 CVE-2025-58181 CVSS scores: CVE-2025-47913 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-47913 SUSE : 8.7...

OPENSUSE-SU-2025:15748-1 python314-3.14.0-3.1 on GA media

These are all security issues fixed in the python314-3.14.0-3.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-46788

Name of the Vulnerable Software and Affected Versions GitLab versions 3.1 through 7.7 Description Multiple vulnerabilities exist in GitLab CE and EE, including Cross-Site Scripting XSS, Information Disclosure, and Prompt Injection. These issues could potentially lead to a compromise of systems. A...

CVE-2025-64184

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

CVE-2025-64184

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...