Archive
30 October 2025
Vulnerabilities first published on this day (UTC), newest first.
88 results · Clear filters · Feed
-
Medium 5.4
A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is lo…
-
Medium 6.1
A stored cross-site scripting (XSS) vulnerability in AIxBlock commit 04f305 allows attackers to execute arbitrary web s…
-
Medium 6.1
An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to e…
-
Medium 6.5
PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAtta…
-
Medium 6.5
Kitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFImporter::ImportActors. When p…
-
Medium 6.1
Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Revolution 4.1 and earlier allows remote unauthenticated a…
-
Medium 6.1
Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows remote unauthenticated att…
-
Medium 6.1
A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the /publix/run endpoint of JATOS 3.7.1 through …