Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
A use-after-free (UAF) vulnerability was discovered in the core parsing component of SQLite 3.41. The flaw occurs because the program frees an ExprList object via sqlite3ExprListDelete and then subseq...
sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead t...
A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function _build_handoff_toolset of the file AstrBot/astrbot/core/astr_agent_tool_exec.py ...
A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/core/astr_main_agent.py. The manipulation of the argument req.func_tool leads to...
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may ...
SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. The vulnerability arises from unsanitized user input passed...
Unauthenticated Broken Access Control in Gillion <= 4.13 versions....
Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions....
Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce – Checkout Manager <= 3.0.5 versions....
Unauthenticated Cross Site Request Forgery (CSRF) in Insert Headers and Footers Code – HT Script <= 1.1.8 versions....
Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions....
Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions....
Subscriber Broken Access Control in YayPricing <= 3.5.6 versions....
Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions....
Contributor Server Side Request Forgery (SSRF) in Feedzy <= 5.2.4 versions....
Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions....
Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions....
Unauthenticated Cross Site Request Forgery (CSRF) in WP Google Review Slider <= 18.4 versions....
Administrator SQL Injection in WP Google Review Slider <= 18.4 versions....
NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a...
Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions....
Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions....
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions....
Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions....