13121 matches found
CGA-CC4M-QPV4-CW68
Bulletin has no description...
CVE-2025-26572
Cross-Site Request Forgery CSRF vulnerability in jesseheap WP PHPList phplist-form-integration allows Cross Site Request Forgery.This issue affects WP PHPList: from n/a through = 1.7...
CVE-2024-3303
An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection...
CVE-2024-8266
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0, which allows an attacker with maintainer role to trigger a pipeline as project owner under certain circumstances...
CVE-2025-25355
A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the fromdate POST request parameter...
CVE-2024-57782
An issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service...
CGA-4Q9X-F5H2-7JVH
Bulletin has no description...
CVE-2025-25289 vulnerabilities
Vulnerabilities for packages: lerna, prism, tileserver-gl, tileserver-gl-fips, renovate...
CGA-RFWR-VM3W-9CGG
Bulletin has no description...
CGA-FF38-CW2F-84P2
Bulletin has no description...
CGA-JW8J-6XMC-XRVC
Bulletin has no description...
CGA-92PF-667X-9H58
Bulletin has no description...
CGA-W25M-RF58-X4F3
Bulletin has no description...
CVE-2025-1212
An information disclosure vulnerability in GitLab CE/EE affecting all versions from 8.3 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send a crafted request to a backend server to reveal sensitive information...
CVE-2024-12251
In Progress Telerik UI for WinUI versions prior to 2025 Q1 3.0.0, a command injection attack is possible through improper neutralization of hyperlink elements...
BELL-CVE-2024-39355
Bulletin has no description...
CGA-X5Q7-Q53H-58QX
Bulletin has no description...
CVE-2025-26341
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to reset arbitrary user passwords via crafted HTTP requests...
CVE-2024-36104
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue...