CVE-2022-45429

Some Dahua software products have a vulnerability of server-side request forgery SSRF. An Attacker can access internal resources by concatenating links URL that conform to specific rules...

CVE-2022-44120

dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...

CVE-2022-26028

Uncontrolled search path in the IntelR VTuneTM Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

OSV-2025-401 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=419340194 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.CharBuffer.wrap java.base/sun.nio.cs.StreamEncoder.implWrite...

CVE-2022-27187

Uncontrolled search path element in the IntelR Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-22823 · Strangebee · Thehive

Name of the Vulnerable Software and Affected Versions: StrangeBee TheHive versions 5.2.0 through 5.2.15 StrangeBee TheHive versions 5.3.0 through 5.3.10 StrangeBee TheHive versions 5.4.0 through 5.4.9 StrangeBee TheHive versions 5.5.0 Description: A Cross-Site Request Forgery CSRF issue allows a...

PT-2025-22707 · Goodlayers · Goodlayers Hostel

Name of the Vulnerable Software and Affected Versions: Goodlayers Hostel versions 3.1.2 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 3.1.2 and earlier, update to a version that fixes this issue, as...

PT-2025-22723 · Unknown · Reifsnyderb Document Management System

Name of the Vulnerable Software and Affected Versions: reifsnyderb Document Management System versions 1.24 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means that an...

PT-2025-22777 · Unknown · Arconix Shortcodes

Name of the Vulnerable Software and Affected Versions: Arconix Shortcodes versions 2.1.16 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-22762 · Unknown · Mojoomla School Management

Name of the Vulnerable Software and Affected Versions: mojoomla School Management versions n/a through 92.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2025-22719 · Unknown · Tayori Form

Name of the Vulnerable Software and Affected Versions: Tayori Form versions 1.2.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-22708 · Goodlayers · Goodlayers Hostel

Name of the Vulnerable Software and Affected Versions: Goodlayers Hostel versions n/a through 3.1.2 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection' vulnerability, which allows Blind SQL Injection...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations, related to the manipulation of NULL pointers, allows attackers to cause service interruptions.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the handling of NULL pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-22681 · WordPress · Gavias Kiamo - Responsive Business Service Wordpress Theme

Name of the Vulnerable Software and Affected Versions: gavias Kiamo - Responsive Business Service WordPress Theme versions 1.3.3 and earlier Description: The issue affects the gavias Kiamo - Responsive Business Service WordPress Theme, allowing for PHP Local File Inclusion due to improper control...

PT-2025-22734 · Unknown · Dastan800 Visual Builder

Name of the Vulnerable Software and Affected Versions: dastan800 Visual Builder versions 1.2.2 and earlier Description: The issue is related to a Missing Authorization vulnerability that allows Reflected XSS in dastan800 Visual Builder. Recommendations: For versions 1.2.2 and earlier, update to a...

PT-2025-22706 · Boldthemes · Boldthemes Medicare

Name of the Vulnerable Software and Affected Versions: BoldThemes Medicare versions n/a through 2.1.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 2.1.0, update to a version later than 2.1.0 to...

PT-2025-22705 · Boldthemes · Boldthemes Avantage

Name of the Vulnerable Software and Affected Versions: BoldThemes Avantage versions 2.4.6 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 2.4.6 and earlier, update to a version later than 2.4.6 to...

PT-2025-22758 · Unknown · Mojoomla School Management

Name of the Vulnerable Software and Affected Versions: mojoomla School Management versions n/a through 92.0.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-22673 · Unknown · Apustheme Capie

Name of the Vulnerable Software and Affected Versions: ApusTheme Capie versions 1.0.0 through 1.0.40 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-22761 · Unknown · Khaled User Meta

Name of the Vulnerable Software and Affected Versions: Khaled User Meta versions n/a through 3.1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a throug...