1949 matches found
CVE-2024-43997
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in easy.Jobs EasyJobs allows Reflected XSS.This issue affects EasyJobs: from n/a through 2.4.14...
CVE-2024-43153
Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through = 5.4.10...
CVE-2024-7505
A vulnerability, which was classified as critical, was found in itsourcecode Bike Delivery System 1.0. Affected is an unknown function of the file contactusaction.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
BELL-CVE-2025-21678
Bulletin has no description...
BELL-CVE-2025-21680
Bulletin has no description...
BELL-CVE-2025-21681
Bulletin has no description...
PT-2025-5596 · Rengine · Rengine
Name of the Vulnerable Software and Affected Versions: reNgine versions prior to 2.2.0 Description: A vulnerability was discovered in reNgine, where an insider attacker with any role can extract sensitive information from other reNgine users. After running a scan and obtaining vulnerabilities fro...
Grafana Alerting VictorOps integration could be exposed to users with Viewer permission
Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 11.5.0, 11.4.1, 11.3.3, 11.2.6, 11.1.11, 11.0.11 and 10.4.15...
GHSA-J63M-2VR6-FV7M DevDojo Voyager vulnerable to path traversal
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass...
CVE-2024-57965
In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted setAttribute'href',href call. NOTE: some parties feel that the code change only addresses a warning message from a SAST tool and does not fix a vulnerability...
BELL-CVE-2024-57931
Bulletin has no description...
BELL-CVE-2024-57360
Bulletin has no description...
CVE-2025-21571
...
CVE-2025-21571
...
CVE-2025-21568
...
CVE-2025-21566
...
CVE-2025-21565
The CVE-2025-21565 entry concerns Oracle Agile PLM Framework (Oracle Supply Chain) Install component vulnerability affecting version 9.3.6. The root cause is weaknesses in the authorization mechanism of the Install component, enabling an unauthenticated, network-accessing attacker to compromise t...
CVE-2025-21558
...
CVE-2025-21557
CVE-2025-21557 affects Oracle Application Express (General component) with affected versions 23.2 and 24.1. The issue allows a low-privileged, network-facing attacker over HTTP to cause unauthorized update/insert/delete and read access to Oracle APEX data, requiring user interaction. Root cause r...