Archive
11 October 2025
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Low 3.7
code-projects Hospital Management System express-session hard-coded key
A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component express-session. This manipulation of the argument secret with the input secret causes use of hard-coded cryptographic key . The attack ca…
-
Low 2.4
GSheetConnector For Gravity Forms <= 1.3.23 - Cross-Site Request Forgery to Arbitrary Plugin Activation/Deactivation
The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 1.3.23. This is due to missing or incorrect nonce validation on the activate_plugin and deactivate_plugin functions. Thi…
-
Low 3.3
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect a…
-
Low 3.3
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect a…
-
Low 3.3
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect a…
-
Low 3.3
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect a…
-
Low 2.8
Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service…