BELL-CVE-2025-0690

Bulletin has no description...

BELL-CVE-2024-45776

Bulletin has no description...

BELL-CVE-2025-21702

Bulletin has no description...

BELL-CVE-2024-45783

Bulletin has no description...

BELL-CVE-2025-0624

Bulletin has no description...

BELL-CVE-2024-45777

Bulletin has no description...

CVE-2024-25066

RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity XXE attacks via a license file, resulting in attacker-controlled files being stored on the product's server. Data exfiltration cannot occur...

CVE-2023-51300

PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting (XSS) via multiple input fields (name, plugin_sms_api_key, plugin_sms_country_code, title) as described in the CVE entry. The vulnerability arises in the web application where user-supplied content can be reflected in the ...

OpenFGA 授权问题漏洞

OpenFGA is OpenFGA open source a high performance and flexible authorization/licensing engine built for developers and inspired by Google Zanzibar. An authorization issue vulnerability exists in versions prior to OpenFGA v1.8.5 that stems from vulnerability to authorization bypass...

CVE-2024-57261

In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-57258...

CVE-2025-22289

Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – Unishippers Edition: from n/a through = 2.5.8...

CVE-2025-26761

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows DOM-Based XSS.This issue affects Easy Elementor Addons: from n/a through = 2.1.5...

CVE-2025-26765

Missing Authorization vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.22...

CVE-2025-26767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Qubely qubely allows Stored XSS.This issue affects Qubely: from n/a through = 1.8.12...

CVE-2025-26766

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VaultDweller Leyka leyka allows Stored XSS.This issue affects Leyka: from n/a through = 3.31.8...

CVE-2025-26779

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Fahad Mahmood Keep Backup Daily keep-backup-daily allows Path Traversal.This issue affects Keep Backup Daily: from n/a through = 2.1.0...

CVE-2025-22680

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Ad Inserter Pro allows Reflected XSS. This issue affects Ad Inserter Pro: from n/a through 2.7.39...

CVE-2025-22286

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows Reflected XSS.This issue affects LTL Freight Quotes – Worldwide Express Edition:...

CVE-2025-26768

Cross-Site Request Forgery CSRF vulnerability in what3words what3words Address Field 3-word-address-validation-field allows Stored XSS.This issue affects what3words Address Field: from n/a through = 4.0.15...

CVE-2025-26759

Cross-Site Request Forgery CSRF vulnerability in alexvtn Content Snippet Manager content-snippet-manager allows Stored XSS.This issue affects Content Snippet Manager: from n/a through = 1.1.5...