CVE Tracker

Palo Alto Networks PAN-OS Command Injection Vulnerability

TP-Link Archer AX-21 Command Injection Vulnerability

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Hikvision Multiple Products Improper Authentication Vulnerability

Oracle WebLogic Server Remote Code Execution Vulnerability

Microsoft SharePoint Code Injection Vulnerability

Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

JetBrains TeamCity Relative Path Traversal Vulnerability

Langflow Missing Authentication Vulnerability

PHP-CGI OS Command Injection Vulnerability

Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

ConnectWise ScreenConnect Authentication Bypass Vulnerability

CrushFTP Authentication Bypass Vulnerability

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

JetBrains TeamCity Authentication Bypass Vulnerability

Ivanti Sentry OS Command Injection Vulnerability

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Dahua IP Camera Authentication Bypass Vulnerability

Hikvision Improper Input Validation

Craft CMS Code Injection Vulnerability

OSGeo GeoServer GeoTools Eval Injection Vulnerability

Meta React Server Components Remote Code Execution Vulnerability

Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

Oracle E-Business Suite Unspecified Vulnerability

Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

CWP Control Web Panel OS Command Injection Vulnerability

Progress LoadMaster Command Injection Vulnerability

Dahua IP Camera Authentication Bypass Vulnerability

CrushFTP VFS Sandbox Escape Vulnerability

SAP NetWeaver Unrestricted File Upload Vulnerability

Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

Microsoft SMBv1 Remote Code Execution Vulnerability

Next.js is a React framework for building full-stack web applications.

n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

Microsoft SharePoint Improper Authentication Vulnerability

Marimo Remote Code Execution Vulnerability

RoundCube Webmail Deserialization of Untrusted Data Vulnerability

Microsoft Windows Buffer Overflow Vulnerability

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Apache ActiveMQ Improper Input Validation Vulnerability

GNU InetUtils Argument Injection Vulnerability

RARLAB WinRAR Code Execution Vulnerability

Omnissa Workspace ONE Server-Side Request Forgery

WordPress Core Interpretation Conflict Vulnerability

Splunk Enterprise Missing Authentication for Critical Function Vulnerability

Laravel Livewire Code Injection Vulnerability

SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

Langflow Code Injection Vulnerability

ConnectWise ScreenConnect Path Traversal Vulnerability

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap funct

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

CrushFTP Unprotected Alternate Channel Vulnerability