2880 matches found
CVE-2024-13041
Removed by vendor...
PT-2025-3836 · Unknown · Campcodes Computer Laboratory Management System
Name of the Vulnerable Software and Affected Versions: CampCodes Computer Laboratory Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /class/edit/edit. The manipulation of the e photo argument leads to...
CVE-2025-0241 Memory corruption when using JavaScript Text Segmentation
When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6...
CVE-2025-21622
CVE-2025-21622 affects ClipBucket V5. The issue arises in the avatar deletion workflow where avatar_url is treated as a file path within the avatars directory without validating path traversal sequences. The final $file variable can be tainted by traversal inputs stored in the DB, enabling deleti...
CVE-2024-49249
Path Traversal: '.../...//' vulnerability in SMSA Express SMSA Shipping smsa-shipping-official allows Path Traversal.This issue affects SMSA Shipping: from n/a through = 2.3...
CVE-2025-22293
CVE-2025-22293 describes a DOM-based XSS in the WordPress Gutentor plugin caused by improper neutralization of input during web page generation. Affected: Gutentor versions up to 3.4.0 (per core CVE data); patches and third‑party advisories mention fixes for 3.4.0 and later (some sources list up ...
CVE-2024-12970
CVE-2024-12970 refers to an OS command injection in Pardus OS My Computer prior to version 0.7.2, caused by improper neutralization of special elements. This vulnerability affects Pardus OS My Computer and could allow an attacker to execute commands on the host. Multiple connected sources corrobo...
CVE-2024-56365 PhpSpreadsheet vulnerable to unauthorized reflected XSS in the constructor of the Downloader class
PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to unauthorized reflected cross-site scripting in the constructor of the Downloader class. Using the /vendor/phpoffice/phpspreadsheet/samples/download.php...
CVE-2024-38764
Cross-Site Request Forgery CSRF vulnerability in Marsian allows Cross Site Request Forgery.This issue affects i-transform: from n/a through 3.0.9...
CVE-2024-37937
Cross-Site Request Forgery CSRF vulnerability in raratheme Rara Business rara-business allows Cross Site Request Forgery.This issue affects Rara Business: from n/a through = 1.2.5...
CVE-2024-37518
CVE-2024-37518 is a CSRF vulnerability in The Events Calendar plugin for WordPress, affecting The Events Calendar versions up to 6.5.1.4. The issue is mitigated by upgrading to version 6.5.1.4 or later (the patched release). The connected sources confirm the vulnerability class as Cross-Site Requ...
CVE-2024-37426
CVE-2024-37426 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin/theme combo “Elegant Pink” (Rara Theme) up to version 1.3.0. Public records consistently describe it as a CSRF issue in Elegant Pink; CVSS from NVD assigns 4.3 (Medium) with network attack vector, l...
CVE-2024-56036
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ondrej Donek odPhotogallery od-photogallery-plugin allows Reflected XSS.This issue affects odPhotogallery: from n/a through = 0.5.3...
PT-2025-26768 · Debian · Debian
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2024-56044
Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS wplmsplugin allows Authentication Bypass.This issue affects WPLMS: from n/a through = 1.9.9...
CVE-2024-56068
Deserialization of Untrusted Data vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup.This issue affects WP SuperBackup: from n/a through = 2.3.3...
CVE-2024-56039
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes VibeBP vibebp allows SQL Injection.This issue affects VibeBP: from n/a through 1.9.9.7.7...
CVE-2024-56229
Cross-Site Request Forgery CSRF vulnerability in Searchiq SearchIQ.This issue affects SearchIQ: from n/a through 4.6...
CVE-2024-56508
LinkAce is a self-hosted archive to collect links of your favorite websites. Prior to 1.15.6, a file upload vulnerability exists in the LinkAce. This issue occurs in the "Import Bookmarks" functionality, where malicious HTML files can be uploaded containing JavaScript payloads. These payloads...