Hardcoded Credentials in Utarit Informatics' SoliClub

Utarit Information Services Inc. SoliClub utarit soliclub

Stored XSS

Zohocorp ManageEngine Applications Manager

Checkmk 安全漏洞

Checkmk GmbH Checkmk checkmk checkmk +2个

Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0

Nozomi Networks Guardian Nozomi Networks CMC +2个

HTML injection in Asset List in Guardian/CMC before 25.5.0

Nozomi Networks Guardian Nozomi Networks CMC +2个

Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0

Nozomi Networks Guardian Nozomi Networks CMC +2个

HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0

Nozomi Networks Guardian Nozomi Networks CMC +2个

HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'

realmag777 HUSKY – Products Filter Professional for WooCommerce

Hummingbird <= 3.18.0 - Unauthenticated Sensitive Information Exposure via Log File

wpmudev Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN

Sweet Energy Efficiency <= 1.0.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Graph Deletion

listingthemes Sweet Energy Efficiency

Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery

bdthemes Prime Slider – Addons for Elementor

Gaining remote control over Govee devices

Govee H6056

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA100...

SonicWall SMA1000 SonicWall SMA1000 +5个

Demo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation

kraftplugins Demo Importer Plus

OpenID Connect Generic Client <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

daggerhart OpenID Connect Generic Client

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion via 'template'

smub Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Insufficient permission validation when showing agent information

Checkmk GmbH Checkmk checkmk checkmk +2个

Nodemailer: nodemailer: denial of service via crafted email address header

nodemailer nodemailer Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 +6个

Improper access validation in M-Files Server

M-Files Corporation M-Files Server m-files m-files_server

WordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerability

weDevs WP ERP