6.5 CVE-2025-46420
A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list()...

6.8 CVE-2025-46421
A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the...

CVE-2025-30408
Local privilege escalation due to insecure folder permissions. The following products are affected:...

CVE-2025-30409
Denial of service due to allocation of resources without limits. The following products are affected:...

CVE-2025-43855
tRPC allows users to build & consume fully typesafe APIs without schemas or code generation. In...

4.8 CVE-2025-29568
A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0....

6.5 CVE-2025-44134
A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/class_save.php....

6.5 CVE-2025-44135
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profile_update.php....

4.1 CVE-2024-30148
Improper access control of endpoint in HCL Leap allows certain admin users to import applications from...

7.5 CVE-2025-32921
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')...

7.5 CVE-2025-39359
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')...

7.5 CVE-2025-39360
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')...

8.5 CVE-2025-39377
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in...

7.5 CVE-2025-39378
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')...

7.5 CVE-2025-39379
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')...

7.1 CVE-2025-39381
Cross-Site Request Forgery (CSRF) vulnerability in Kiotviet KiotViet Sync allows Stored XSS. This issue...

7.1 CVE-2025-39382
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in...

7.5 CVE-2025-39383
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')...

7.5 CVE-2025-39384
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')...

4.3 CVE-2025-39385
Missing Authorization vulnerability in VW Themes Sirat allows Exploiting Incorrectly Configured Access...

7.5 CVE-2025-39387
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')...