16951 matches found
GHSA-M4MM-534H-5CP5 AutoQueryable leaks sensitive information
An issue in trenoncourt AutoQueryable v.1.7.0 allows a remote attacker to obtain sensitive information via the Unselectable function...
BELL-CVE-2025-27113
Bulletin has no description...
BELL-CVE-2025-24928
Bulletin has no description...
CVE-2025-25224
The LuxCal Web Calendar prior to 5.3.3M MySQL version and prior to 5.3.3L SQLite version contains a missing authentication vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained...
CVE-2025-25222
The LuxCal Web Calendar prior to 5.3.3M MySQL version and prior to 5.3.3L SQLite version contains an SQL injection vulnerability in retrieve.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved...
CVE-2025-25957
Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges via a crafted script...
CVE-2025-26310
Multiple memory leaks have been identified in the ABC file parsing functions parseABCCONSTANTPOOL and parseABCFILE in util/parser.c of libming v0.4.8, which allow attackers to cause a denial of service via a crafted ABC file...
CVE-2025-24965
A flaw was found in the crun container runtime. In affected versions, a malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed; only the ability for the current user to write t...
CVE-2021-44647 affecting package ntopng for versions less than 5.2.1-5
CVE-2021-44647 affecting package ntopng for versions less than 5.2.1-5. A patched version of the package is available...
CVE-2025-26778
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jordy Meow Gallery gallery allows Stored XSS.This issue affects Gallery: from n/a through = 2.2.1...
CVE-2025-26758
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RebelCode Spotlight Social Media Feeds spotlight-social-photo-feeds allows Retrieve Embedded Sensitive Data.This issue affects Spotlight Social Media Feeds: from n/a through = 1.7.1...
CVE-2025-26754
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Timeline Block timeline-block-block allows Stored XSS.This issue affects Timeline Block: from n/a through = 1.1.1...
BELL-CVE-2025-26466
Bulletin has no description...
BELL-CVE-2025-0685
Bulletin has no description...
BELL-CVE-2025-0690
Bulletin has no description...
BELL-CVE-2025-0677
Bulletin has no description...
BELL-CVE-2024-45776
Bulletin has no description...
BELL-CVE-2025-21702
Bulletin has no description...