Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
A vulnerability has been found in Edimax EW-7478APC 1.04. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. Such manipulation of the argum...
A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. This manipulation of the argum...
A vulnerability was detected in Edimax EW-7478APC 1.04. This vulnerability affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. The manipulat...
A security vulnerability has been detected in Edimax EW-7478APC 1.04. This affects the function formQoS of the file /goform/formQoS of the component POST Request Handler. The manipulation of the argum...
Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI Agent read access to obtain reusable, potent...
Unauthenticated Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.9.0 versions....
Unauthenticated Broken Access Control in Japanized For WooCommerce <= 2.9.12 versions....
Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions....
Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions....
Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions....
Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions....
Subscriber Broken Access Control in Ads by WPQuads <= 3.0.3 versions....
Unauthenticated Broken Access Control in WP User Frontend <= 4.3.7 versions....
Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions....
Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions....
Performer Arbitrary File Deletion in Paid Videochat Turnkey Site <= 7.4.8 versions....
Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions....
Subscriber Cross Site Scripting (XSS) in WooCommerce Designer Pro <= 1.9.34 versions....
Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions....
Subscriber Broken Access Control in MainWP <= 6.1.1 versions....
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions....
Unauthenticated Cross Site Scripting (XSS) in BEAR <= 1.1.8 versions....
Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that ...
phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers to access the full contents of the uploaded-files database table by visiting any ...