CVE Records

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Scripting Engine Memory Corruption Vulnerability

TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload

Mitel SIP Phones Argument Injection Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Samsung MagicINFO 9 Server Path Traversal Vulnerability

Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code

RoundCube Webmail Cross-Site Scripting Vulnerability

Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability

Oracle WebLogic Server Unspecified Vulnerability

Expedition: Missing Authentication Leads to Admin Account Takeover

Incomplete Input Validation in GlideExpression Script

Jelly Template Injection Vulnerability in ServiceNow UI Macros

Microsoft SharePoint Remote Code Execution Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Twilio Authy Information Disclosure Vulnerability

Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

Cisco NX-OS Software CLI Command Injection Vulnerability

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

VMware ESXi Authentication Bypass Vulnerability

Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

GeoVision EOL device - OS Command Injection

Android Pixel Privilege Escalation Vulnerability

XXE can expose crypt key and other secrets granting full admin access

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

net: fix __dst_negative_advice() race

Argument Injection in PHP-CGI

Mali GPU Kernel Driver allows improper GPU memory processing operations

RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

SolarWinds Serv-U L Directory Transversal Vulnerability

Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

Rejetto HTTP File Server 2.3m Unauthenticated RCE

Registration Authentication Bypass Vulnerability

Information disclosure

Google Chromium V8 Type Confusion Vulnerability

Malicious Code in Justice AV Solutions (JAVS) Viewer

Google Chromium V8 Type Confusion Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

Google Chromium Visuals Use-After-Free Vulnerability

Apache OFBiz: Path traversal leading to RCE

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

Cisco ASA and FTD Privilege Escalation Vulnerability

Cisco ASA and FTD Denial of Service Vulnerability

Unauthenticated arbitrary file read and remote code execution in CrushFTP

Apache HugeGraph-Server: Command execution in gremlin

PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

SmartScreen Prompt Security Feature Bypass Vulnerability

Android Pixel Privilege Escalation Vulnerability

Android Pixel Information Disclosure Vulnerability

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

.NET Framework Information Disclosure Vulnerability

ColdFusion | Improper Access Control (CWE-284)

Windows Error Reporting Service Elevation of Privilege Vulnerability

Fortinet FortiClient EMS SQL Injection Vulnerability

Apple Multiple Products Memory Corruption Vulnerability

Apple Multiple Products Memory Corruption Vulnerability

JetBrains TeamCity Relative Path Traversal Vulnerability

JetBrains TeamCity Authentication Bypass Vulnerability

LoadMaster Pre-Authenticated OS Command Injection

Authentication bypass using an alternate path or channel

Improper limitation of a pathname to a restricted directory (“path traversal”)

Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

Fortinet Multiple Products Format String Vulnerability

Internet Shortcut Files Security Feature Bypass Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Fortinet FortiOS Out-of-Bound Write Vulnerability

Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

Use-after-free in Linux kernel's netfilter: nf_tables component

Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

Apple Multiple Products WebKit Type Confusion Vulnerability

D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

Atlassian Confluence Data Center and Server Template Injection Vulnerability

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

Weak Password Recovery Mechanism for Forgotten Password in GitLab

Apple iOS and iPadOS Use-After-Free Vulnerability

Apple Multiple Products Memory Corruption Vulnerability

Linux Kernel Use-After-Free Vulnerability

Arbitrary Code Execution (ACE) Vulnerability

Google Chromium WebRTC Heap Buffer Overflow Vulnerability

Legacy VioStor NVR

FXC AE1021, AE1021PE OS Command Injection Vulnerability

SonicWall SMA100 Appliances OS Command Injection Vulnerability

Unitronics VisiLogic uses a default administrative password

Integer Overflow or Wraparound in Graphics Linux