Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2025-03-23 CVE-2025-2654 Unspecified vulnerability in Oretnom23 AC Repair and Services System 1.0
A vulnerability was found in SourceCodester AC Repair and Services System 1.0.
network
low complexity
oretnom23
critical
9.8
2025-03-23 CVE-2025-2651 A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0.
network
low complexity
CWE-548
5.3
2025-03-23 CVE-2025-2652 Unspecified vulnerability in Oretnom23 Employee and Visitor Gate Pass Logging System 1.0
A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic.
network
low complexity
oretnom23
7.5
2025-03-23 CVE-2025-2691 Unspecified vulnerability in Nossrf Project Nossrf
Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism.
network
low complexity
nossrf-project
critical
9.1
2025-03-23 CVE-2025-2650 Cross-site Scripting vulnerability in PHPgurukul Medical Card Generation System 1.0
A vulnerability, which was classified as problematic, has been found in PHPGurukul Medical Card Generation System 1.0.
network
low complexity
phpgurukul CWE-79
6.1
2025-03-23 CVE-2025-2648 SQL Injection vulnerability in PHPgurukul ART Gallery Management System 1.0
A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.0.
network
low complexity
phpgurukul CWE-89
critical
9.8
2025-03-23 CVE-2025-2649 SQL Injection vulnerability in PHPgurukul Doctor Appointment Management System 1.0.0
A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0.
network
low complexity
phpgurukul CWE-89
critical
9.8
2025-03-23 CVE-2025-2647 SQL Injection vulnerability in PHPgurukul ART Gallery Management System 1.0
A vulnerability was found in PHPGurukul Art Gallery Management System 1.0.
network
low complexity
phpgurukul CWE-89
critical
9.8
2025-03-23 CVE-2025-2639 Unspecified vulnerability in Jizhicms
A vulnerability has been found in JIZHICMS up to 1.7.0 and classified as problematic.
network
low complexity
jizhicms
5.3
2025-03-22 CVE-2025-2625 SQL Injection vulnerability in Westboy Cicadascms 1.0
A vulnerability classified as critical has been found in westboy CicadasCMS 1.0.
network
low complexity
westboy CWE-89
4.9