Search Vulnerabilities

Improper protection of an alternate path in Ivanti N-ITSM before version 2025

AWS API MCP File Access Restriction Bypass

Gitea before 1

Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser

Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4

Privilege Management for Windows - Elevation of Privilege

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an a...

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file

vBulletin 5

Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine

CodiMD through 2

CodiMD through 2

Yii 2 before 2

Cortex XDR Broker VM: Unauthorized Access to Broker VM Docker Containers

Container Escape Vulnerability in TR7's Application Security Platform (ASP)

A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions >= V11

Improper Protection of Alternate Path in GitLab

Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass

In KioWare for Windows (versions all through 8

KioWare for Windows (versions all through 8