Medium - CVE-2025-36106 - IBM Cognos Analytics Mobile (iOS) 1.1.0 through...
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential...
NA - CVE-2025-51396 - A stored cross-site scripting (XSS)...
A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Telegram Bot Username...
NA - CVE-2025-51397 - A stored cross-site scripting (XSS)...
A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...
NA - CVE-2025-51398 - A stored cross-site scripting (XSS)...
A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted...
NA - CVE-2025-51400 - A stored cross-site scripting (XSS)...
A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
NA - CVE-2025-51401 - A stored cross-site scripting (XSS)...
A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...
NA - CVE-2025-51403 - A stored cross-site scripting (XSS)...
A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a...
Medium - CVE-2025-7934 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, has been found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a. This issue affects the function queryPage of the file...
Medium - CVE-2025-7935 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, was found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a. Affected is the function SysLogController of the file...
NA - CVE-2025-51868 - Insecure Direct Object Reference (IDOR)...
Insecure Direct Object Reference (IDOR) vulnerability in Dippy (chat.dippy.ai) v2 allows attackers to gain sensitive information via the conversation_id parameter to the conversation_history endpoint.