Search Vulnerabilities

Red Hat Security Advisory: assertj-core security update

Red Hat Security Advisory: httpd security update

Joomla Extension - yootheme.com - Authenticated, privileged information disclosure about site modules YOOtheme Pro 1.0.0-5.0.40

Ech0 before 4.4.3 SSRF via DNS Resolution Bypass

Ech0 before 4.4.3 Stored XSS via SVG Upload

Ech0 before 4.4.3 Missing Authorization on System Logs

Ech0 before 4.7.3 Unauthenticated Like Endpoint Metric Inflation

Ech0 before 4.7.3 Stored XSS via RSS feed tag names

Ech0 before 4.7.3 Unauthenticated fav_count Modification

Ech0 before 4.7.3 Email Disclosure via Public API

vLLM before 0.27.0 Denial of Service via DeepStream Backend

liketrek TREK Journey Entry Update journey.controller.t journeyService.updateEntry sql injection

Media Sweep <= 1.1.3 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter

Ultimate Member <= 2.12.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Textarea Profile Field with HTML Support (DOM Gadget via id...

My Agile Privacy® <= 3.3.6 - Missing Authorization to Unauthenticated Plugin Settings Modification via map_missing_cookie_shield / map_check_consen...

Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter

Keycloak-services: keycloak-services: jwt bearer authorization grant does not enforce consentrequired

liketrek TREK Pre-2FA mfa_token authService.ts loginUser improper authentication

HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by multiple security vulnerabilities.