Archive
21 August 2025
Vulnerabilities first published on this day (UTC), newest first.
48 results · Clear filters · Feed
-
Medium 5.3
Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attack…
-
Medium 6.5
Cross-site scripting (XSS) vulnerability in the component /common/reports of Akaunting v3.1.18 allows attackers to exec…
-
Medium 6.5
An issue in the component /settings/localisation of Akaunting v3.1.18 allows authenticated attackers to cause a Denial …
-
Medium 5.3
Incorrect access control in the component \controller\UserController.java of jshERP v3.5 allows attackers to arbitraril…
-
Medium 5.3
Incorrect access control in the component /controller/PersonController.java of jshERP v3.5 allows unauthorized attacker…
-
Medium 5.4
SQL Injection in the listdomains function in Easy Hosting Control Panel (EHCP) 20.04.1.b allows authenticated attackers…
-
Medium 5.4
MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component. This allows an attacker to execute a…
-
Medium 5.3
An XML external entities (XXE) injection vulnerability in the /init API endpoint in Exagid EX10 before 6.4.0 P20, 7.0.1…