Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Unauthenticated SQL Injection in wpDataTables <= 7.4 versions....
Unauthenticated Sensitive Data Exposure in Ads by WPQuads <= 3.0.3 versions....
Unauthenticated SQL Injection in JetBooking <= 4.0.4.1 versions....
Unauthenticated Broken Access Control in User Registration <= 5.2.2 versions....
Mattermost versions 10.11.x <= 10.11.18, 11.6.x <= 11.6.3, 11.5.x <= 11.5.6 fail to properly apply markdown image rendering restrictions to AI bot tool result posts, which allows an authenticated atta...
An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via supplying a crafted PSD file....
A heap overflow in the FSViewer.exe process of FastStone Image Viewer v8.3 allows attackers to cause a execute arbitrary code in the context of the current process via supplying a crafted JPEG 2000 (J...
Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions....
Contributor Cross Site Scripting (XSS) in BNE Testimonials <= 2.0.8 versions....
Contributor Cross Site Scripting (XSS) in Image Carousel <= 1.0.0.41 versions....
Contributor Local File Inclusion in Goya Core < 1.0.9.4 versions....
Contributor Local File Inclusion in Splash - Sport Club WordPress Theme for Basketball, Football, Hockey <= 4.4.3 versions....
Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 versions....
Unauthenticated Insecure Direct Object References (IDOR) in BookPro <= 1.1.0 versions....
Unauthenticated Content Injection in Auros Core <= 5.3.1 versions....
Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions....
Contributor Broken Access Control in Live Copy Paste for Elementor <= 1.5.3 versions....
Subscriber Broken Access Control in Restaurant Menu by MotoPress <= 2.4.11 versions....
Contributor Broken Access Control in Forget About Shortcode Buttons <= 2.1.3 versions....
In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack...
In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags...
In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details...
In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings...
In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible...