Medium - CVE-2025-6582 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file...
Medium - CVE-2025-6583 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of...
High - CVE-2025-0966 - IBM InfoSphere Information Server 11.7...
IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete...
High - CVE-2025-36004 - IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user...
IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user to gain elevated privileges due to an unqualified library call in IBM Facsimile Support for i. A malicious actor could cause user-controlled code to...
Medium - CVE-2025-5585 - The SiteOrigin Widgets Bundle plugin for...
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `data-url` DOM Element Attribute in all versions up to, and including, 1.68.4 due to...
NA - CVE-2025-43880 - Inefficient regular expression complexity issue...
Inefficient regular expression complexity issue exists in GROWI prior to v7.1.6. If exploited, a logged-in user may cause a denial of service (DoS) condition.
NA - CVE-2024-51977 - An unauthenticated attacker who can access...
An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive...