Archive
7 May 2025
Vulnerabilities first published on this day (UTC), newest first.
8 results · Clear filters · Feed
-
Low 2.0
i-Educar Stored Cross-Site Scripting vulnerability
i-Educar is free, fully online school management software. Version 2.9 of the application fails to properly validate and sanitize user supplied input, leading to a stored cross-site scripting vulnerability that resides within the user type (Tipo de Usuário) i…
-
Low 3.5
q2apro q2apro-on-site-notifications q2apro-onsitenotifications-page.php process_request cross site scripting
A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function process_request of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It i…
-
Low 1.3
insa-auth Open-Redirect on provided CAS server login endpoint
insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potentially revealing basic student information (name and number). However, the issue posed minimal risk, …
-
Low 3.1
Discourse Code Review Plugin vulnerable to XSS via auto link commits
The Discourse Code Review Plugin allows users to review GitHub commits on Discourse. Prior to commit eed3a80, an attacker can execute arbitrary JavaScript on users' browsers by posting links to malicious GitHub commits. This problem is patched in commit eed3a…
-
Low —
scanner has a Public API without sufficient bounds checking
`Match::get()` and `Match::ptr()` lack sufficient bounds checks, leading to potential out of bounds reads.
-
Low 3.3
Use of implicit intent for sensitive communication in translation in Samsung Notes prior to version 4.4.29.23 allows lo…
-
Low 3.1
Out-of-bounds Read in libplctag library
Out-of-bounds Read vulnerability in unpack_response (conn.c) in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network.
-
Low 3.1
Out-of-bounds Read in libplctag library
Out-of-bounds Read vulnerability in unpack_response (session.c) in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network.