Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list, allowing attackers to bypass security checks. Malicious actors can craft pickle payloads using pty.spawn to...
picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by using distutils.file_util.write_file. Attackers can construct malic...
picklescan before 0.0.33 contains an incomplete deny-list that fails to block pydoc.locate and operator.methodcaller functions, allowing attackers to bypass security checks. Remote attackers can craft...
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Host Header Injection vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to tr...
In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files....
Missing Authorization vulnerability in EMV JobBank allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobBank: from n/a through 1.2.3....
Unauthenticated Local File Inclusion in Line Agency <= 1.3.1 versions....
Unauthenticated Local File Inclusion in Etude <= 1.6 versions....
Unauthenticated Local File Inclusion in Eventicity <= 1.5 versions....
Unauthenticated Local File Inclusion in Gunslinger <= 1.7 versions....
Unauthenticated Local File Inclusion in Skyward <= 1.10 versions....
Unauthenticated Local File Inclusion in Granola <= 1.13 versions....
Unauthenticated Local File Inclusion in Gamic <= 1.15 versions....
Unauthenticated Local File Inclusion in Preservation <= 1.10 versions....
Unauthenticated Cross Site Scripting (XSS) in SweetDate Core < 1.1.5 versions....
Deserialization of Untrusted Data vulnerability in Pixel Makers Creative INC. Entrepreneur - Booking for Small Businesses WordPress Theme allows Object Injection. This issue affects Entrepreneur - Bo...
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in EMV JobCareer allows Path Traversal. This issue affects JobCareer: from n/a through 7.3....
Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions....
Unauthenticated Local File Inclusion in Fortius <= 2.3.0 versions....
Unauthenticated Local File Inclusion in Snow Club <= 1.1 versions....
Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions....
Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme <= 1.2.2 versions....
Unauthenticated PHP Object Injection in Reisen <= 1.4.1 versions....
Unauthenticated Local File Inclusion in Imba <= 1.5.0 versions....