漏洞列表 354145
CVE ID 标题 严重程度 CVSS 发布时间 受影响产品 数据源 操作
CVE-2024-44655
PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the searc...
MEDIUM 6.1 2025-11-17
phpgurukul complaint_management_system
CVE NVD
CVE-2024-44657
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todat...
MEDIUM 6.5 2025-11-17
phpgurukul complaint_management_system
CVE NVD
CVE-2024-44658
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and ca...
MEDIUM 6.5 2025-11-17
phpgurukul complaint_management_system
CVE NVD
CVE-2024-44659
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forg...
CRITICAL 9.8 2025-11-17
phpgurukul online_shopping_portal
CVE NVD
CVE-2024-44660
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and ...
MEDIUM 6.5 2025-11-17
phpgurukul online_shopping_portal
CVE NVD
CVE-2024-44661
PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity p...
MEDIUM 5.4 2025-11-17
phpgurukul online_shopping_portal
CVE NVD
CVE-2024-44662
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in t...
MEDIUM 6.5 2025-11-17
phpgurukul online_shopping_portal
CVE NVD
CVE-2024-44663
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in se...
MEDIUM 6.5 2025-11-17
phpgurukul online_shopping_portal
CVE NVD
CVE-2024-44664
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, ...
MEDIUM 6.5 2025-11-17
phpgurukul online_shopping_portal
CVE NVD
CVE-2024-46334
kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser ...
MEDIUM 6.1 2025-11-17
kashipara school_management_system
CVE NVD
CVE-2024-46335
PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via the fromda...
MEDIUM 4.6 2025-11-17
phpgurukul complaint_management_system
CVE NVD
CVE-2024-46336
kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/...
MEDIUM 6.1 2025-11-17
kashipara school_management_system
CVE NVD
CVE-2025-63292
Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–...
LOW 3.5 2025-11-17
freebox v5_hd_firmware freebox v5_crystal_firmware +3个
CVE NVD
CVE-2025-63708
Cross-Site Scripting (XSS) vulnerability exists in SourceCodester AI Font Matcher (nid=18425, 2025-1...
MEDIUM 6.1 2025-11-17
remyandrade ai_font_matcher
CVE NVD
CVE-2025-63747
QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installation...
CRITICAL 9.8 2025-11-17
testmanagement qatraq
CVE NVD
CVE-2025-63748
QaTraq 6.9.2 allows authenticated users to upload arbitrary files via the "Add Attachment" feature i...
HIGH 8.8 2025-11-17
testmanagement qatraq
CVE NVD
CVE-2025-63916
MyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF compression...
HIGH 8.1 2025-11-17
luotengyuan myscreentools
CVE NVD
CVE-2025-63917
PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML exte...
HIGH 7.1 2025-11-17
cnblogs pdfpatcher
CVE NVD
CVE-2025-63918
PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attac...
MEDIUM 6.2 2025-11-17
cnblogs pdfpatcher
CVE NVD
CVE-2025-64046
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.
MEDIUM 6.1 2025-11-17
openrapid rapidcms
CVE NVD