Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions....
Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions....
Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions....
Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions....
Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions....
Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions....
Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions....
Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions....
Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to versio...
DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommen...
Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions....
Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions....
Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions....
Unauthenticated Remote Code Execution (RCE) in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 versions....
Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions....
Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions....
Unauthenticated SQL Injection in WPJobster <= 6.3.5 versions....
Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions....
Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions....
Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security s...
A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the serve...
Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions....
Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions....
Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions....