16955 matches found
PT-2025-9737 · Google +2 · Google Chrome +2
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 134.0.6998.35 Description: The issue allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Recommendations: For versions prior...
PT-2025-9718 · Sourcecodester · Sourcecodester Best Church Management
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.1 Description: A critical vulnerability has been found in the software, affecting an unknown functionality of the file /admin/app/web crud.php. The manipulation of the encryption argume...
PT-2025-9710 · Unknown · Mysiteforme
Name of the Vulnerable Software and Affected Versions: mysiteforme versions prior to 2025.01.1 Description: A SQL injection issue exists. Recommendations: For versions prior to 2025.01.1, update to version 2025.01.1 or later to resolve the issue...
GO-2025-3482 Mattermost fails to invalidate all active sessions when converting a user to a bot in github.com/mattermost/mattermost-server
Mattermost fails to invalidate all active sessions when converting a user to a bot in github.com/mattermost/mattermost-server...
GO-2025-3466 Missing rate limit in MaysWind ezBookkeeping in github.com/mayswind/ezbookkeeping
Missing rate limit in MaysWind ezBookkeeping in github.com/mayswind/ezbookkeeping...
GO-2025-3484 Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome
Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome...
GHSA-3MF5-R4HG-HFX9 mavo DOM Clobbering vulnerability
A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...
CVE-2024-43169
CVE-2024-43169 affects IBM Engineering Requirements Management DOORS Next versions 7.0.2, 7.0.3, and 7.1. The IBM security bulletin identifies the vulnerability as a Reflected File Download where a user could download a malicious file without verifying code integrity. The IBM CVSS context lists a...
CVE-2024-8261 IDOR in Proliz Software's OBS
Authorization Bypass Through User-Controlled Key vulnerability in Proliz Software OBS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects OBS: before 24.0927...
CVE-2024-47092 Insecure deserialization and improper certificate validation in Checkmk Exchange plugin check-mk-api
Insecure deserialization and improper certificate validation in Checkmk Exchange plugin check-mk-api prior to 5.8.1...
MAL-2025-1910 Malicious code in owl.carousel.custom (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1893 Malicious code in meli-tools (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1878 Malicious code in linkedin-sdk (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-23881 WordPress LJ Custom Menu Links Plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in littlejon LJ Custom Menu Links lj-custom-menu-links allows Reflected XSS.This issue affects LJ Custom Menu Links: from n/a through = 2.5...
MAL-2025-1816 Malicious code in godaddy-oauth (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1808 Malicious code in explat-client (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1774 Malicious code in com.unity.visualscripting (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1760 Malicious code in cmpuiforoath (npm)
--- -= Per source details. Do not edit below this line.=-...
