14944 matches found
PT-2025-22651 · Zohocorp · Zoho Manageengine Adaudit Plus
Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions below 8511 Description: The issue concerns SQL injection in the OU History report. This allows for potential exploitation. Recommendations: For Zohocorp ManageEngine ADAudit Plus versions below 8511...
PT-2025-22665 · Unknown · Phpgurukul Medical Card Generation System
Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Medical Card Generation System version 1.0 Description: The issue concerns stored cross-site scripting XSS vulnerabilities in the /admin/card-bwdates-report.php component. Attackers can execute arbitrary web scripts or HTML by...
PT-2025-22796 · Unknown · Freefloat Ftp Server
Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue has been found in the TYPE Command Handler component, leading to a buffer overflow. This issue can be exploited remotely. Recommendations: For FreeFloat FTP Server version 1.0,...
PT-2025-22742 · Unknown · Fable Extra
Name of the Vulnerable Software and Affected Versions: Fable Extra versions 1.0.0 through 1.0.6 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This allows for Blind SQL Injection, which can b...
PT-2025-22655 · WordPress · Tablepress
Name of the Vulnerable Software and Affected Versions: TablePress plugin for WordPress versions up to, and including, 3.1.2 Description: The issue is related to DOM-Based Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers wi...
PT-2025-22737 · Unknown · M A Vinoth Kumar Category Widget
Name of the Vulnerable Software and Affected Versions: M A Vinoth Kumar Category Widget versions n/a through 2.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in the Category...
PT-2025-22738 · Unknown · Phpaddicted Igit Related Posts With Thumb Image After Posts
Name of the Vulnerable Software and Affected Versions: phpaddicted IGIT Related Posts With Thumb Image After Posts versions n/a through 4.5.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Store...
PT-2025-22728 · Unknown · Detheme Easy Guide
Name of the Vulnerable Software and Affected Versions: Detheme Easy Guide versions n/a through 1.0.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...
PT-2025-22792 · Unknown · Fujian Kelixun
Name of the Vulnerable Software and Affected Versions: Fujian Kelixun version 1.0 Description: A critical issue was found in the code, specifically affecting the file /app/xml cdr/xml cdr details.php. The manipulation of the uuid argument leads to SQL injection. This issue can be exploited...
PT-2025-22810 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3.4 Description: A logging oversight in OpenEMR allows password change events to go unrecorded on the client-side log viewer. This prevents administrators from auditing critical actions, weakening traceability an...
PT-2025-22800 · Unknown · Sipass Integrated Ac5102 +1
Name of the Vulnerable Software and Affected Versions: SiPass integrated AC5102 ACC-G2 All versions SiPass integrated ACC-AP All versions Description: A vulnerability has been identified where affected devices do not properly check the integrity of firmware updates. This could allow a local...
PT-2025-22808 · Unknown · Phpgurukul Student Management System
Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Student Management System using PHP and MySQL version 1 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/studentrecordms/password-recovery.php" endpoint, specificall...
PT-2025-22817 · Unknown · Phpgurukul Student Management System
Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Student Management System using PHP and MySQL version 1 Description: The issue is related to multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/studentrecordms/login.php" API endpoint, specifically v...
CVE-2022-23435
decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service...
CVE-2022-39872
Improper restriction of broadcasting Intent in ShareLive prior to version 13.2.03.5 leaks MAC address of the connected Bluetooth device...
CVE-2022-1983
Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allowed an attacker already in possession of a valid Deploy Key or a Deploy Token to misuse it from any location to access Container Registries even when IP...
CVE-2022-1850
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...
CVE-2022-0198
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...