Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network....
Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network....
Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions....
Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions....
Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability because user-controlled message fields are rendered as templates without neutralization...
ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set the first credential of users lacking any authentication met...
Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodies, allowing authenticated clients to choose which HuggingFace model the server...
Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions....
Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions....
Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions....
Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Object Injection.This issue affects FV Flowplayer Video Player: from n/a throug...
Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions....
Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions....
Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions....
Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions....
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally....
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by...