Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 408,826
- Last 24h
- 2,076
- Critical, 7 days
- 351
- Known exploited
- 1,779
107,769 results · Clear filters · Feed
-
Medium 4.3
Information disclosure in the Private Browsing component
Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
-
Medium 5.3
NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacker could c…
-
Medium 6.3
MISP sourcecache module SSRF allows fetching arbitrary internal URLs via attribute enrichment
The sourcecache expansion module in MISP Modules (misp-modules) contains a Server-Side Request Forgery (SSRF) vulnerability. When a user with permission to create or modify attributes of type 'link' or 'url' submits an attribute value, the module passes the U…
-
Medium 4.3
WCK before 2.4.1 Missing Authorization via wck_show_update_form AJAX
Custom Post Types and Custom Fields creator (WCK) before 2.4.1 contains a missing authorization vulnerability that allows authenticated attackers with access to any WCK meta box to read custom-field values on posts they cannot edit by exploiting the wck_show_…
-
Medium 6.3
Insufficient validation of payment status in pretix-adyen
Our payment integration with Adyen did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets wi…
-
Medium 6.5
Improper Access Control Vulnerability in TÜBİTAK BİLGEM's eta-remote
Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects eta-remote: from 0.0.2 before 0.0.3.
-
Medium 5.1
Stored Cross-Site Scripting in the Vaadin Rich Text Editor via an Unescaped Video Embed
The Vaadin Rich Text Editor exports a video embed without escaping its value, and then parses the resulting HTML into live DOM. A value crafted to break out of the href attribute therefore runs script in the viewer's browser. An attacker who can edit shared c…
-
Medium 4.8
Unescaped Download File Name Allows Content-Disposition Parameter Injection in Vaadin Flow
DownloadEvent.setFileName(String) in Vaadin Flow writes the download file name into the Content-Disposition header without escaping it. When the name is pure US-ASCII the header is built as attachment; filename="<name>" with the name inserted verbatim, so a d…
-
Medium 5.1
A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11…
-
Medium 4.2
Libstdc++: overflow leaves streambuf in inconsistent state on i/o error.
A flaw was found in libstdc++. When a byte-by-byte write operation fails during file stream processing, the library may still append data into the internal memory buffer. An attacker capable of inducing repeated write failures in an affected service can trigg…
-
Medium 6.1
Gst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset table
A flaw was found in GStreamer's MXF demuxer. When an application processes a crafted MXF file, an off-by-one bounds check can allow a one-byte write past the logical end of a temporal offset array. This may corrupt memory and cause the application to crash. T…
-
Medium 5.5
Gst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsing
A flaw was found in GStreamer's gst-plugins-bad MPEG Program Stream demuxer and resindvd DVD-playback plugin. The PES header parsers do not adequately check remaining data before reading timestamps and optional header fields. Opening a specially crafted MPEG …
-
Medium 5.3
Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions and invoke…
-
Medium 5.3
Missing authorization in device and deployment group page events allows view-role members to change devices and deployment groups
Missing Authorization vulnerability in the device and deployment group pages in nerves-hub nerves_hub_web allows an authenticated organization member with the view role to change devices and deployment groups via LiveView events reserved for the manage role. …
-
Medium 5.5
Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling
A flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when parsing crafted VANC data can cause an out-of-bounds read in the demuxer, while an incorrect buffer size calculation when muxing multiple ancillary packets can cause…
-
Medium 6.6
Cockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an option
A flaw was found in cockpit-storaged. A Tang keyserver address read from a clevis token in a LUKS header is concatenated into curl's argument vector without a "--" separator. An address beginning with "-" is parsed by curl as an option instead of a hostname, …
-
Medium 4.3
sooperset mcp-atlassian io.py validate_safe_path path traversal
A vulnerability was identified in sooperset mcp-atlassian up to 0.24.0. This issue affects the function validate_safe_path of the file src/mcp_atlassian/utils/io.py. The manipulation of the argument path leads to path traversal. The attack may be initiated re…
-
Medium 6.9
A high privileged remote attacker can upload arbitrary files to a guessable location. This can result in a loss of avai…
-
Medium 6.4
An unauthenticated remote attacker can perform a XSS attack on a logged in backend user allowing for execution of multi…
-
Medium 5.3
Authentication bypass in com_check
An unauthenticated remote attacker can perform an authentication bypass on the com_check function, potentially triggering traffic on other systems and email alerts. This can result in some loss of availability due to higher system loads.
-
Medium 5.3
The FraudLabs Pro SMS Verification WordPress plugin through 1.12.1 does not enforce its SMS-retry limit on the server s…
-
Medium 5.3
The Cargo Shipping Location for WooCommerce WordPress plugin before 6.0 does not properly restrict access to a REST API…
-
Medium 6.8
Keycloak-services: keycloak-services: client-level mandatory pkce bypass via login-actions entry point
A flaw was found in the keycloak-services component of Keycloak, which provides the core authentication and authorization logic for the identity provider. The issue occurs when a user initiates a login after visiting the password reset page, causing the syste…
-
Medium 6.5
It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permi…
-
Medium 5.3
The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the appl…
-
Medium 6.5
Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which coul…
-
Medium 6.7
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalatio…
-
Medium 4.3
The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only …
-
Medium 6.7
A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized …
-
Medium 5.3
Extend B2B - Companies and Users Management for WooCommerce <= 2.1.4 - Unauthenticated Sensitive Information Exposure in /wp/v2/aio_company REST Endpoint
The Extend B2B - Companies and Users Management for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via the register_company_api. This makes it possible for unauthenticated attackers…
-
Medium 5.3
An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a speci…
-
Medium 6.9
A vulnerability was found in Michael-A-Kuykendall Shimmy up to 2.6.4. The affected element is an unknown function of th…
-
Medium 6.4
Weak Cryptography in SAP NetWeaver and ABAP Platform (Application Server ABAP)
Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker with high privileges and access to a network segment between application servers on an SAP syste…
-
Medium 6.0
Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager
Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker with administrative privileges could obtain sensitive information from stored data. This may allow correlation of credentials across users a…
-
Medium 6.1
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Visual Composer
SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on certain request data. An unauthenticated attacker could craft a malicious link containing specially crafted input. If a victim clicks the link, the injected scri…
-
Medium 6.5
Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)
An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has SSRF vulnerability due to insecure default settings. An authenticated attacker with low privileges could trick the victim to interact with a malicious server whic…
-
Medium 6.1
CSS Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)
SAP NetWeaver Application Server Java (Web Dynpro Java) does not sufficiently validate certain request parameters used to resolve styling resources in the application. An unauthenticated attacker could craft a malicious link that, when clicked by an authentic…
-
Medium 6.5
Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit)
SAP NetWeaver Application Server Java (NWDI Cockpit) does not perform sufficient authorization checks for certain functionality before processing the requests. An attacker with low privileges could exploit this to perform unauthorized modifications. Successfu…
-
Medium 6.5
Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server for ABAP
SAP NetWeaver Application Server for ABAP does not properly validate certain input values. An authenticated user could send specially crafted requests to trigger an error in internal processing. This could crash the affected work process and make the system u…
-
Medium 6.5
Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit)
SAP NetWeaver Application Server Java (NWDI Cockpit)� does not perform sufficient authorization checks for certain functionality that retrieves sensitive information. An attacker with low privileges could send a specially crafted request to access sensitive i…