Browse CVEs

MEDIUM 6.5 CVE-2025-34304 IPFire versions prior to 2.29 (Core Update 198) contain a SQL injection vulnerability that allows an authenticated attacker to manipulate the SQL que… Ipfire 2.29+ Fix from $1,6002025-10-28 HIGH 7.5 CVE-2025-11735 The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the `phrase` parameter in all … Mitigation only Fix from $1,9502025-10-28 CRITICAL 9.8 CVE-2025-12336 A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file… Retro Basketball Shoes Online Store Mitigation only Fix from $2,3002025-10-28 CRITICAL 9.8 CVE-2025-12337 A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/admin_featu… Retro Basketball Shoes Online Store Mitigation only Fix from $2,3002025-10-28 CRITICAL 9.8 CVE-2025-12338 A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown code of the file /admin/admin… Retro Basketball Shoes Online Store Mitigation only Fix from $2,3002025-10-28 CRITICAL 9.8 CVE-2025-12339 A security vulnerability has been detected in Campcodes Retro Basketball Shoes Online Store 1.0. This issue affects some unknown processing of the fi… Retro Basketball Shoes Online Store Mitigation only Fix from $2,3002025-10-28 HIGH 7.3 CVE-2025-12342 A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the compon… Mitigation only Fix from $1,9502025-10-28 MEDIUM 6.5 CVE-2025-12329 A security flaw has been discovered in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. The affected element is an unknown function … Ruet Oj after 2022-10-19 Fix from $1,6002025-10-27 MEDIUM 6.5 CVE-2025-12328 A vulnerability was identified in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. Impacted is an unknown function of the file /cont… Ruet Oj after 2022-10-19 Fix from $1,6002025-10-27 CRITICAL 9.8 CVE-2025-12325 A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.ph… Best Salon Management System Mitigation only Fix from $2,3002025-10-27 HIGH 7.5 CVE-2025-12326 A vulnerability was found in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This vulnerability affects unknown code of the file /p… Ruet Oj after 2022-10-19 Fix from $1,9502025-10-27 MEDIUM 6.5 CVE-2025-12327 A vulnerability was determined in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This issue affects some unknown processing of the… Ruet Oj after 2022-10-19 Fix from $1,6002025-10-27 CRITICAL 9.8 CVE-2025-12316 A vulnerability was identified in code-projects Courier Management System 1.0. This impacts an unknown function of the file /courier/edit-courier.php… Courier Management System Mitigation only Fix from $2,3002025-10-27 CRITICAL 9.8 CVE-2025-12314 A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. P… Food Ordering System Mitigation only Fix from $2,3002025-10-27 CRITICAL 9.8 CVE-2025-12315 A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a m… Food Ordering System Mitigation only Fix from $2,3002025-10-27 CRITICAL 9.8 CVE-2025-12307 A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the fi… Nero Social Networking Site Mitigation only Fix from $2,3002025-10-27 CRITICAL 9.8 CVE-2025-12308 A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the fil… Nero Social Networking Site Mitigation only Fix from $2,3002025-10-27 CRITICAL 9.8 CVE-2025-12309 A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executi… Nero Social Networking Site Mitigation only Fix from $2,3002025-10-27 CRITICAL 9.8 CVE-2025-12306 A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This … Nero Social Networking Site Mitigation only Fix from $2,3002025-10-27 CRITICAL 9.6 CVE-2025-61385 SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list inp… Mitigation only Fix from $2,3002025-10-27 HIGH 8.2 CVE-2025-61247 indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in the password parameter of login.php. Mitigation only Fix from $1,9502025-10-27 CRITICAL 9.8 CVE-2025-12292 A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulatio… Point Of Sales Mitigation only Fix from $2,3002025-10-27 CRITICAL 9.8 CVE-2025-12293 A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manip… Point Of Sales Mitigation only Fix from $2,3002025-10-27 CRITICAL 9.8 CVE-2025-12294 A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /delete_category.php. Performin… Point Of Sales Mitigation only Fix from $2,3002025-10-27 HIGH 8.8 CVE-2023-49440 AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter." Mitigation only Fix from $1,9502025-10-27 HIGH 7.2 CVE-2025-12287 A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 20251013. This impacts an unkn… Wholesale after 2025-10-13 Fix from $1,9502025-10-27 HIGH 7.3 CVE-2025-12277 A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file… Mitigation only Fix from $1,9502025-10-27 CRITICAL 9.3 CVE-2025-41009 SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data f… Mitigation only Fix from $2,3002025-10-27 HIGH 8.8 CVE-2025-12263 A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /edit_judge.php. The man… Online Event Judging System No fix yet Fix from $1,9502025-10-27 HIGH 8.8 CVE-2025-12262 A vulnerability was determined in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /edit_criteria.php. Exe… Online Event Judging System No fix yet Fix from $1,9502025-10-27