CVE-2018-18757

Open Faculty Evaluation System 5.6 for PHP 5.6 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18758...

CVE-2025-39355

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in roninwp FAT Services Booking fat-services-booking allows SQL Injection.This issue affects FAT Services Booking: from n/a through = 5.6...

CVE-2025-39355

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in roninwp FAT Services Booking fat-services-booking allows SQL Injection.This issue affects FAT Services Booking: from n/a through = 5.6...

CVE-2025-32590

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tzin111 Web2application web2application allows Reflected XSS.This issue affects Web2application: from n/a through = 6.1...

CVE-2025-32590

CVE-2025-32590 refers to a Reflected XSS in Web2application plugin (WordPress) up to version 5.7/5.6 depending on listing. The description states improper neutralization of input during web page generation leading to cross-site scripting. Connected records confirm the vulnerability is tied to Web...

CVE-2025-27925

Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...

CVE-2025-27925

Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...

PT-2025-10644

Name of the Vulnerable Software and Affected Versions Nintex Automation versions 5.6 through 5.7 Description The issue concerns insecure deserialization of user input. Recommendations For versions 5.6 and 5.7, update to version 5.8 or later to resolve the issue...

CVE-2024-54220 WordPress FAT Services Booking plugin <= 5.6 - Subscriber+ Site-Wide Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Roninwp FAT Services Booking allows Stored XSS.This issue affects FAT Services Booking: from n/a through 5.6...

CVE-2024-54220

CVE-2024-54220 concerns WordPress plugin FAT Services Booking (Roninwp FAT Services Booking). The issue is an Stored XSS caused by improper neutralization of input during web page generation, affecting FAT Services Booking versions up to 5.6 (n/a through 5.6). The CVSSv3.1/3.1 vector in the initi...

Security Bulletin: Mutiple vulnerabilites in Python affect IBM Robotic Process Automation

Summary Mutiple vulnerabilites in Python affect IBM Robotic Process Automation. Python is used by IBM Robotic Process Automation as part of Watson NLP. This bulletin identifies the fixes required to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2019-11236 DESCRIPTION: Python urllib...

WordPress FAT Services Booking plugin <= 5.6 - Subscriber+ Site-Wide Cross Site Scripting (XSS) vulnerability

Subscriber+ Site-Wide Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin FAT Services Booking versions = 5.6...

io.github.openfeign.querydsl:querydsl-collections (>=5.0.1 <=5.6), io.github.openfeign.querydsl:querydsl-hibernate-search (>=5.0.1 <=5.6) +6 more potentially affected by CVE-2024-49203 via io.github.openfeign.querydsl:querydsl-apt (>=5.0.1 <=5.6)

io.github.openfeign.querydsl:querydsl-apt MAVEN version =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.6 Source cves: CVE-2024-49203 Source advisory: OSV:GHSA-6Q3Q-6V5J-H6VG...

CVE-2024-39707

Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version...

CVE-2024-39707

Insyde IHISI function 0x49 can restore the factory defaults of certain UEFI variables without authentication, enabling a potential roll-back attack on specific platforms. Affected stack: Insyde IHISI (on affected platforms) with kernel versions prior to 5.2/05.29.19, prior to 5.3/05.38.19, prior ...

CVE-2024-39707

Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version...

Security Bulletin: IBM Operations Analytics - Log Analysis is vulnerable to an XML External Entity Injection (XXE) vulnerability

Summary There is a potential XML External Entity Injection XXE vulnerability with reload4j library that is used in IBM Operations Analytics - Log Analysis. This has been addressed. Vulnerability Details IBM X-Force ID: 294027 DESCRIPTION: QOS.CH reload4j allow a remote attacker to obtain sensitiv...

RHSA-2011:0017 Red Hat Security Advisory: Red Hat Enterprise Linux 5.6 kernel security and bug fix update

Bulletin has no description...

RHSA-2016:1612 Red Hat Security Advisory: rh-php56-php security update

Bulletin has no description...

CVE-2024-42885

CVE-2024-42885 concerns a SQL injection in ESAFENET CDG (v5.6 and earlier) that allows an attacker to execute arbitrary code via the id parameter on the data.jsp page. Affected product: ESAFENET CDG up to version 5.6. Root cause: improper handling of input used in SQL queries on data.jsp. Impact:...