ALPINE-CVE-2024-25178

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in ljstate.c...

PT-2025-27479 · Unknown · Phpgurukul Zoo Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical issue affects the processing of the file /admin/view-normal-ticket.php, where the manipulation of the viewid argument leads to SQL injection. This issue can be exploited...

PT-2025-27481 · Unknown · Phpgurukul Zoo Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical issue has been discovered, affecting an unknown function of the file /admin/manage-foreigners-ticket.php. The manipulation of the ID argument leads to SQL injection. This...

CVE-2025-49967

CVE-2025-49967 is a CSRF vulnerability in the WordPress plugin Live Sports Streamthunder (affected versions n/a through 2.1). The issue enables cross-site request forgery, allowing unauthorized actions on behalf of a logged-in user. Public sources in the connected documents identify the affected ...

PT-2025-24076 · Unknown · Phpgurukul Local Services Search Engine Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Local Services Search Engine Management System version 2.1 Description: A critical issue was found in the PHPGurukul Local Services Search Engine Management System. This issue affects the file /admin/edit-person-detail.php and is...

CVE-2025-5690 Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pgdump. This problem occurs only when dynamic masking is enabled, which is not the...

PT-2025-23426 · Ibm · Ibm Planning Analytics

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics Local versions 2.0 through 2.1 Description: The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after a logout. Recommendations: For versions 2.0 and...

CVE-2024-51879

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arash Heidari Text Advertisements text-advertisements allows Stored XSS.This issue affects Text Advertisements: from n/a through = 2.1...

CVE-2023-4841

The Feeds for YouTube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'youtube-feed' shortcode in versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers wit...

CVE-2023-41650

Cross-Site Request Forgery CSRF vulnerability in Venugopal Remove/hide Author, Date, Category Like Entry-Meta plugin = 2.1 versions...

CVE-2022-46489

GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gfisomboxparseex function at boxfuncs.c...

CVE-2022-46490

GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the afrtboxread function at boxcodeadobe.c...

CVE-2021-24314

The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue...

CVE-2019-10375

An arbitrary file read vulnerability in Jenkins File System SCM Plugin 2.1 and earlier allows attackers able to configure jobs in Jenkins to obtain the contents of any file on the Jenkins master...

CVE-2017-8102

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipityeventxsstrust plugin and a setconfig error in that plugin...

CVE-2025-32924

CVE-2025-32924 concerns the WordPress plugin Revy (Roninwp Revy). Affected versions are

CVE-2025-32924 WordPress Revy plugin <= 2.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in roninwp Revy allows SQL Injection.This issue affects Revy: from n/a through 2.1...

CVE-2025-32924 WordPress Revy plugin <= 2.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in roninwp Revy revy allows SQL Injection.This issue affects Revy: from n/a through = 2.1...

CVE-2025-39369

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sihibbs Posts for Page posts-for-page allows DOM-Based XSS.This issue affects Posts for Page: from n/a through = 2.1...

PT-2025-21881

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical vulnerability was found in the PHPGurukul Zoo Management System. The issue is related to an unknown function of the file /admin/view-foreigner-ticket.php, where the...