7.1 CVE-2025-22282
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in...

7.3 CVE-2025-3239
A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected...

7.3 CVE-2025-3240
A vulnerability, which was classified as critical, has been found in PHPGurukul Online Fire Reporting...

6.3 CVE-2025-3241
A vulnerability, which was classified as problematic, was found in zhangyanbo2007 youkefu up to 4.2.0....

6.3 CVE-2025-3242
A vulnerability has been found in PHPGurukul e-Diary Management System 1.0 and classified as critical....

6.3 CVE-2025-3243
A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical....

6.3 CVE-2025-3244
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has...

6.3 CVE-2025-3245
A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical....

7.6 CVE-2025-31420
Incorrect Privilege Assignment vulnerability in Tomdever wpForo Forum allows Privilege Escalation.This...

5.8 CVE-2025-31421
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Oblak...

CVE-2025-3189
Stored Cross-Site Scripting (XSS) in DoWISP in versions prior to 1.16.2.50, which consists of an stored...

9.8 CVE-2024-51800
Incorrect Privilege Assignment vulnerability in Favethemes Homey allows Privilege Escalation.This issue...

6.5 CVE-2025-22281
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in...

6.5 CVE-2025-22285
Missing Authorization vulnerability in Eniture Technology Pallet Packaging for WooCommerce allows Exploiting...

CVE-2025-28146
Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command...

9.8 CVE-2025-2798
The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and...

6.5 CVE-2025-31381
Missing Authorization vulnerability in shiptrack Booking Calendar and Notification allows Exploiting...

7.1 CVE-2025-31384
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Aviplugins...

7.1 CVE-2025-31389
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in...

9.3 CVE-2025-31403
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in...

7.5 CVE-2025-31405
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')...