13092 matches found
CVE-2024-56477
IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
CVE-2025-24565
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.3.3...
CVE-2025-24554
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awcode AWcode Toolkit awcode-toolkit allows Reflected XSS.This issue affects AWcode Toolkit: from n/a through = 1.0.14...
CVE-2025-24692
Missing Authorization vulnerability in M.Code Bulk Menu Edit bulk-menu-edit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Menu Edit: from n/a through = 1.3...
CVE-2025-25994
SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...
CGA-QPV9-27XV-GVHX
Bulletin has no description...
CGA-3M7J-X4C7-JH49
Bulletin has no description...
CGA-Q2CP-8FW5-4MG2
Bulletin has no description...
CGA-GWP4-6554-5R8X
Bulletin has no description...
CGA-CC4M-QPV4-CW68
Bulletin has no description...
CVE-2025-26572
Cross-Site Request Forgery CSRF vulnerability in jesseheap WP PHPList phplist-form-integration allows Cross Site Request Forgery.This issue affects WP PHPList: from n/a through = 1.7...
CVE-2024-3303
An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection...
CVE-2024-8266
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0, which allows an attacker with maintainer role to trigger a pipeline as project owner under certain circumstances...
CVE-2025-25355
A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the fromdate POST request parameter...
CVE-2024-57782
An issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service...
CGA-4Q9X-F5H2-7JVH
Bulletin has no description...
CVE-2025-25289 vulnerabilities
Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips, prism, lerna, renovate...
CGA-RFWR-VM3W-9CGG
Bulletin has no description...