PrestaShop EuroInformation MoneticoPaiement 安全漏洞

PrestaShop EuroInformation MoneticoPaiement is a plugin from PrestaShop France for integrating Monetico/CIC/Créditxa0Mutuel payment gateway into PrestaShop. A security vulnerability exists in PrestaShop EuroInformation MoneticoPaiement versions prior to 1.1.1 that stems from the parameters TPE,...

uptrace pgdriver 安全漏洞

uptrace pgdriver is an extension library for Golang from uptrace Moldova. A security vulnerability exists in uptrace pgdriver version v1.2.1, which stems from an unvalidated appendArg function in the /pgdriver/format.go file, which could lead to an SQL injection attack...

VMware AVI Load Balancer 安全漏洞

VMware Avi Load Balancer is a load balancing platform from VMware. VMware Avi Load Balancer suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL...

go-pg pg 安全漏洞

go-pg pg is a go-pg open source ORM for Golang. A security vulnerability exists in go-pg pg version v10.13.0, which stems from an unvalidated /types/appendvalue.go component that could lead to an SQL injection attack...

PT-2025-25301 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...

Dairy Farm Shop Management System /add-product.php File SQL Injection Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement for the parameter productname in the file...

PT-2025-25195 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...

PT-2025-25192 · Apache · Apache Web Server

Name of the Vulnerable Software and Affected Versions: Apache Web Server affected versions not specified Description: The issue concerns unvalidated user input. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue...

CVE-2025-3899

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists in Certificates page on Webserver that could cause an unvalidated data injected by authenticated malicious user leading to modify or read data in a victim’s browser...

CVE-2025-3899

CVE-2025-3899 impacts Schneider Electric Modicon Controllers’ web interface (Certificates page). The issue is a Cross-Site Scripting (CWE-79) vulnerability caused by improper input neutralization during web page generation, allowing an authenticated malicious user to inject unvalidated data that ...

CVE-2025-4954

The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users author and above to upload arbitrary files such as PHP on the server...

PT-2025-24629 · Unknown · Vwebserver

Name of the Vulnerable Software and Affected Versions: Webserver affected versions not specified Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This could allow an authenticated malicious user to inject...

PT-2025-24637 · Cisco · Cisco Webex Meeting Server

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meeting Server affected versions not specified Description: The issue concerns an unvalidated redirect in Cisco Webex Meeting Server. No information is provided about the estimated number of potentially affected devices worldwide ...

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. The Complaint Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in parameter noc in the /user/register-complaint.ph file. An attacker can exploit...

SUSE-SU-2025:01811-1 Security update for gnuplot

This update for gnuplot fixes the following issues: - CVE-2025-31176: invalid read leads to segmentation fault on plot3dpoints bsc1240325. - CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8copyone bsc1240326. - CVE-2025-31178: unvalidated user input leads to segmentatio...

PT-2025-23767 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No further details are provided about the nature of the issue, affected devices, or real-world incidents. Recommendations: At the momen...

PT-2025-23764 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No further details are provided about the nature of the issue, affected devices, or real-world incidents. Recommendations: At the momen...

PHPGurukul Dairy Farm Shop Management System SQL注入漏洞

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the fromdate/todate parameter in the file /bwdate-report-details.php for externally...

PT-2025-23768 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...

Delta Electronics CNCSoft-G2 缓冲区错误漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. A buffer overflow vulnerability exists in Delta Electronics CNCSoft-G2 V2.1.0.20 and earlier versions, which stems from a lack of validation of user-supplied files and can be exploited by an...