Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions....
Contributor Broken Access Control in uListing <= 2.2.0 versions....
Subscriber Broken Access Control in uListing <= 2.2.0 versions....
Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions....
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions....
Unauthenticated Broken Access Control in Ditty <= 3.1.66 versions....
Editor Arbitrary File Upload in Mailster <= 4.1.17 versions....
Unauthenticated Broken Access Control in WP Go Maps <= 10.1.04 versions....
Subscriber Broken Access Control in eRoom <= 1.7.1 versions....
Contributor Broken Access Control in Mediavine Control Panel <= 2.10.10 versions....
Contributor SQL Injection in eRoom <= 1.7.1 versions....
Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions....
Administrator Cross Site Scripting (XSS) in Photo Gallery by Supsystic <= 1.16.3 versions....
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This issue affects Create...
Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) <= 0.6.6 versions....
Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions....
A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sust...
A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI). Due to incorrect network binding, a malicious actor within the cluster can bypass authentication and imper...
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users witho...
Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript....
Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories....
Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions....
Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability....
Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass....