Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods....
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to exe...
ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit t...
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access o...
Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-privileged attacker could exploi...
Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gain...
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access o...
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access o...
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access o...
Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from t...
Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network....
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network....
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network....
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network....
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network....
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network....