5.1
CVE-2025-2976 - GFI KerioConnect File Upload cross site scripting
A vulnerability was found in GFI KerioConnect 10.0.6. It has been classified as problematic. Affected is an unknown function of the component File Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and mโฆ
5.1
CVE-2025-2975 - GFI KerioConnect Signature EditHtmlSource cross site scripting
A vulnerability was found in GFI KerioConnect 10.0.6 and classified as problematic. This issue affects some unknown processing of the file Settings/Email/Signature/EditHtmlSource of the component Signature Handler. The manipulation leads to cross site scripting. The attack may be initiated remotelyโฆ
8.3
CVE-2025-3014 - Insecure direct object references (IDOR) in NightWolf Penetration Platform
Insecure Direct Object References (IDOR) in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.
8.3
CVE-2025-3013 - Insecure direct object references (IDOR) in NightWolf Penetration Platform
Insecure Direct Object References (IDOR) in access control in Customer Portal before 2.1.4 on NightWolfย Penetration Testingย allows an attacker to access via manipulating request parameters or object references.
5.1
CVE-2025-2974 - CodeCanyon Perfex CRM Contracts contract cross site scripting
A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contract of the component Contracts. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely. โฆ
9.8
CVE-2025-3011 - PiExtract SOOP-CLM - SQL Injection
SOOP-CLM from PiExtract has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
5.3
CVE-2025-2973 - code-projects College Management System student.php unrestricted upload
A vulnerability, which was classified as critical, was found in code-projects College Management System 1.0. This affects an unknown part of the file /Admin/student.php. The manipulation of the argument profile_image leads to unrestricted upload. It is possible to initiate the attack remotely. The โฆ
0.0
CVE-2025-2972 - ConcreteCMS Page Attribute Display Block cross site scripting
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
0.0
CVE-2025-2971 -
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
0.0
CVE-2025-2970 -
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.