5.1

CVSS4.0

CVE-2025-2976 - GFI KerioConnect File Upload cross site scripting

A vulnerability was found in GFI KerioConnect 10.0.6. It has been classified as problematic. Affected is an unknown function of the component File Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and mโ€ฆ

๐Ÿ“… Published: March 31, 2025, 4:31 a.m. ๐Ÿ”„ Last Modified: Nov. 4, 2025, 7:36 p.m.

5.1

CVSS4.0

CVE-2025-2975 - GFI KerioConnect Signature EditHtmlSource cross site scripting

A vulnerability was found in GFI KerioConnect 10.0.6 and classified as problematic. This issue affects some unknown processing of the file Settings/Email/Signature/EditHtmlSource of the component Signature Handler. The manipulation leads to cross site scripting. The attack may be initiated remotelyโ€ฆ

๐Ÿ“… Published: March 31, 2025, 4 a.m. ๐Ÿ”„ Last Modified: Nov. 4, 2025, 7:37 p.m.

8.3

CVSS4.0

CVE-2025-3014 - Insecure direct object references (IDOR) in NightWolf Penetration Platform

Insecure Direct Object References (IDOR) in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.

๐Ÿ“… Published: March 31, 2025, 3:48 a.m. ๐Ÿ”„ Last Modified: April 1, 2025, 8:26 p.m.

8.3

CVSS4.0

CVE-2025-3013 - Insecure direct object references (IDOR) in NightWolf Penetration Platform

Insecure Direct Object References (IDOR) in access control in Customer Portal before 2.1.4 on NightWolfย Penetration Testingย allows an attacker to access via manipulating request parameters or object references.

๐Ÿ“… Published: March 31, 2025, 3:40 a.m. ๐Ÿ”„ Last Modified: April 1, 2025, 8:26 p.m.

5.1

CVSS4.0

CVE-2025-2974 - CodeCanyon Perfex CRM Contracts contract cross site scripting

A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contract of the component Contracts. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely. โ€ฆ

๐Ÿ“… Published: March 31, 2025, 3:31 a.m. ๐Ÿ”„ Last Modified: Oct. 2, 2025, 3:36 p.m.

9.8

CVSS3.1

CVE-2025-3011 - PiExtract SOOP-CLM - SQL Injection

SOOP-CLM from PiExtract has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

๐Ÿ“… Published: March 31, 2025, 3:30 a.m. ๐Ÿ”„ Last Modified: April 1, 2025, 8:26 p.m.

5.3

CVSS4.0

CVE-2025-2973 - code-projects College Management System student.php unrestricted upload

A vulnerability, which was classified as critical, was found in code-projects College Management System 1.0. This affects an unknown part of the file /Admin/student.php. The manipulation of the argument profile_image leads to unrestricted upload. It is possible to initiate the attack remotely. The โ€ฆ

๐Ÿ“… Published: March 31, 2025, 3 a.m. ๐Ÿ”„ Last Modified: April 10, 2025, 2:34 p.m.

0.0

CVE-2025-2972 - ConcreteCMS Page Attribute Display Block cross site scripting

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

๐Ÿ“… Published: March 31, 2025, 2:31 a.m. ๐Ÿ”„ Last Modified: April 4, 2025, 1:15 a.m.

0.0

CVE-2025-2971 -

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

๐Ÿ“… Published: March 31, 2025, 2 a.m. ๐Ÿ”„ Last Modified: April 7, 2025, 11:15 p.m.

0.0

CVE-2025-2970 -

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

๐Ÿ“… Published: March 31, 2025, 1:31 a.m. ๐Ÿ”„ Last Modified: April 4, 2025, 1:15 a.m.
Total resulsts: 343746
Page 5592 of 34,375
ยซ previous page ยป next page
Filters