Results
34,765 of 90,429· Page 112/696Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions.
Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.
Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions.
Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions.
Unauthenticated Broken Access Control in picu <= 3.10.1 versions.
Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.
Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions.
Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions.
Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex
Subscriber Broken Access Control in WPO365 <= 44.1 versions.
Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 versions.
A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the f
Memory corruption while processing service requests.
Memory Corruption when executing system service routines due to improper handling of user input buffers.
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocat
Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsig
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronizatio
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b
The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin
Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions.
Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions.
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 versions.
Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting I
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the
A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/p
A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/pro
There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote,
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1
Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scr
Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in a
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87b
Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server en
A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9
A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d
Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Help
Test your stack for 2026issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.