Jira Align Unauthorized Access

The vulnerability of the subscription function in the cloud corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a malicious actor, operating...

Portfolio Room Module Unauthorized Access

The vulnerability of the Portfolio Room module in the cloud corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a malicious actor, operating...

Jira Align Authorization Bypass

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process when performing the Team Overview action. Exploiting this vulnerability could allow a malicious...

Jira Align Authorization Bypass

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process when performing the “Add Checklist” action. Exploiting this vulnerability could allow a malicious...

Jira Align Authorization Bypass

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process during the execution of the “Generate Team Sprints” action. Exploiting this vulnerability could...

External Reports Module Unauthorized Access

The vulnerability of the External Reports module in the cloud corporate solution for planning and managing Jira Align formerly AgileCraft is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...

EUVD-2025-36219

Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints...

CVE-2025-60983

Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints...

CVE-2025-60983

Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints...

CVE-2025-60983

Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints...

CVE-2025-60983: Improper Neutralization of Input During Web Page Generation

Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints...

PT-2025-43999

Name of the Vulnerable Software and Affected Versions Rubikon Banking Solution version 4.0.3 Description A reflected cross-site scripting issue exists in the "Search For Customers Information" endpoints of Rubikon Banking Solution. This allows for the injection of malicious scripts through...

CVE-2025-60983

A Reflected Cross Site Scripting (XSS) vulnerability exists in Neptune Rubikon Banking Solution version 4.0.3 . The flaw is located in the "Search For Customers Information" endpoints, where the application fails to properly neutralize input during web page generation. This allows an attacker to ...

Neptune Rubikon Banking Solution security vulnerabilities

Neptune Rubikon Banking Solution is a banking services platform from Neptune UK. A security vulnerability exists in Neptune Rubikon Banking Solution version 4.0.3, which originates from the presence of reflective cross-site scripting in the Search For Customers Information endpoint...

CVE-2025-11823: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'buttonexisttext' parameter in the 'wishsuitebutton' shortcode in all versions up to, and including, 3.2.4 due to insufficient...

CVE-2025-6680: Improper Access Control

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.3. This makes it possible for authenticated attackers, with tutor-level access and above, to view assignments for courses they don't...

CVE-2025-6639: Improper Authorization

The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.8.3 due to missing validation on a user controlled key when viewing and editing assignments through the tutorassignmentsubmit...

CVE-2025-11564: Missing Authorization

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check while verifying webhook signatures on the "verifyAndCreateOrderData" function in all versions up to, and including, 3.8.3. This makes it...

Open Solution QuickCMS Cross-Site Script Vulnerability

Open Solution QuickCMS is an Open Solution open source content management system. A cross-site scripting vulnerability exists in Open Solution QuickCMS version 6.8, which stems from multiple stored cross-site scripting vulnerabilities in the slider editor feature, which could lead to the injectio...

Open Solution QuickCMS Cross-Site Script Vulnerability

Open Solution QuickCMS is an Open Solution open source content management system. A cross-site scripting vulnerability exists in Open Solution QuickCMS version 6.8, which stems from the presence of multiple stored cross-site scripts in the page editor functionality, which could lead to the...