40568 matches found
Multiple I-O DATA NAS management applications register Windows services with unquoted file paths
Overview Multiple NAS management applications provided by I-O DATA DEVICE, INC. register Windows services with unquoted file paths. Multiple NAS management applications provided by I-O DATA DEVICE, INC. contain the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-61865...
Reflected Cross-Site Scripting (XSS)
com.liferay, com.liferay.portal.search.web is vulnerable to Reflected Cross-Site Scripting XSS. The vulnerability is due to improper input validation of user-supplied data in the search bar portlet URL, which allows an attacker to inject and execute arbitrary web scripts or HTML in a victim’s...
CVE-2025-61255
Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting XSS vulnerability via the /search parameter, where unsanitized input allows arbitrary HTML and JavaScript injection, potentially resulting in information disclosure and user redirection...
Asterisk safe_asterisk Privilege Escalation
The vulnerability of the safeasterisk /usr/sbin/safeasterisk script in the Asterisk IP telephony management system is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to increase their privileges...
TencentOS Server 3: .NET 8.0 (TSSA-2025:0822)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0822 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
CVE-2025-48099: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Code Amp Search & Filter search-filter allows Cross Site Request Forgery.This issue affects Search & Filter: from n/a through = 1.2.17...
WordPress plugin Search & Filter has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
PT-2025-43161
Name of the Vulnerable Software and Affected Versions Code Amp Search & Filter versions through 1.2.17 Description A Cross-Site Request Forgery CSRF issue exists in Code Amp Search & Filter search-filter. This allows attackers to perform actions on behalf of authenticated users without their...
CVE-2025-53059
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch Dashboards. Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSof...
CVE-2025-61255
Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting XSS vulnerability via the /search parameter, where unsanitized input allows arbitrary HTML and JavaScript injection, potentially resulting in information disclosure and user redirection...
JLSEC-2025-181 Uncontrolled search path element in the Intel(R) oneAPI Toolkit OpenMP before version 2022.1 may...
Uncontrolled search path element in the IntelR oneAPI Toolkit OpenMP before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
Malicious code in qwant-search-extension (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b62fa18764e78b78ad37bea56c978df2cba57aa015e3b3eb13b0fc74e05678b1 The OpenSSF Package Analysis project identified...
MAL-2025-48556 Malicious code in qwant-search-extension (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b62fa18764e78b78ad37bea56c978df2cba57aa015e3b3eb13b0fc74e05678b1 The OpenSSF Package Analysis project identified...
WordPress Ajax Search Lite plugin <= 4.13.3 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Valentinos Chouris in WordPress Plugin Ajax Search Lite versions = 4.13.3...
CVE-2025-61454
A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoint. Unsanitized input in the /search parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987695)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987695 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in estreesearch Hulk Robot reported a BUGON:...
PHPGurukul Bank Locker Management System security vulnerabilities
Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the /search parameter, which can be exploited by an attacker to...
EUVD-2025-35211
Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting XSS vulnerability via the /search parameter, where unsanitized input allows arbitrary HTML and JavaScript injection, potentially resulting in information disclosure and user redirection...
PT-2025-45201
Name of the Vulnerable Software and Affected Versions Ajax Search Lite versions prior to 4.13.4 Description An issue exists involving the deserialization of untrusted data, which allows for PHP Object Injection. This occurs when the software processes untrusted input, enabling authenticated...
PT-2025-42923
Name of the Vulnerable Software and Affected Versions Bank Locker Management System by PHPGurukul affected versions not specified Description The Bank Locker Management System is susceptible to a Cross-Site Scripting XSS issue. The /search parameter does not properly sanitize input, allowing the...