Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network....
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network....
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network....
Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network....
Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network....
Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0.6, and 2025.0.3 on Windows allows authenticated users to bypass MFA requir...
Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including ...
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to improper limitation of a pathname to a restricted directory....
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper sanitization of secrets during flow and project exports....
Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions....
Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions....
Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions....
Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions....
Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions....
Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions....