Archive
9 June 2025
Vulnerabilities first published on this day (UTC), newest first.
50 results · Clear filters · Feed
-
Medium 6.5
Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service
A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leadi…
-
Medium 6.3
PHPGurukul Nipah Virus Testing Management System test-details.php sql injection
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /test-details.php. The manipulation of the argument assignto leads to s…
-
Medium 6.3
PHPGurukul Nipah Virus Testing Management System patient-report.php sql injection
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient-report.php. The manipulation of the argument searchdata leads to sql injection. It is p…
-
Medium 6.3
code-projects Patient Record Management System urinalysis_record.php sql injection
A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /urinalysis_record.php. The manipulation of the argument itr_no leads to sql injection. The atta…
-
Medium 6.1
A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b …
-
Medium 6.8
An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Bi…
-
Medium 5.4CVE-2025-46041 Public exploit
A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript…
-
Medium 6.1CVE-2025-46178 Public exploit
Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project…
-
Medium 5.4
Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module. An authenti…
-
Medium 5.4
Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my pr…