Latest CVE Feed
-
5.4
MEDIUMCVE-2018-19906
Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.... Read more
Affected Products : razorcms- EPSS Score: %0.19
- Published: Dec. 31, 2018
- Modified: May. 06, 2025
-
5.4
MEDIUMCVE-2018-19905
HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.... Read more
Affected Products : razorcms- EPSS Score: %0.21
- Published: Dec. 31, 2018
- Modified: May. 06, 2025
-
8.1
HIGHCVE-2018-18601
The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buffer Overflow.... Read more
- EPSS Score: %0.46
- Published: Dec. 31, 2018
- Modified: May. 06, 2025
-
9.3
HIGHCVE-2018-18600
The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.... Read more
- EPSS Score: %1.67
- Published: Dec. 31, 2018
- Modified: May. 06, 2025
-
8.8
HIGHCVE-2024-23534
An Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. ... Read more
Affected Products : avalanche- Published: Apr. 19, 2024
- Modified: May. 06, 2025
-
7.5
HIGHCVE-2024-23530
An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory. ... Read more
Affected Products : avalanche- Published: Apr. 19, 2024
- Modified: May. 06, 2025
-
7.5
HIGHCVE-2024-23529
An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory. ... Read more
Affected Products : avalanche- Published: Apr. 19, 2024
- Modified: May. 06, 2025
-
3.5
LOWCVE-2024-12683
The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is dis... Read more
Affected Products : smart_maintenance_mode- Published: Mar. 26, 2025
- Modified: May. 06, 2025
- Vuln Type: Cross-Site Scripting
-
7.2
HIGHCVE-2025-2855
A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file /api/deploy/upload. The manipulation of the argument servers leads to deserialization. The attac... Read more
Affected Products : eladmin- Published: Mar. 27, 2025
- Modified: May. 06, 2025
- Vuln Type: Authentication
-
7.5
HIGHCVE-2024-23528
An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory. ... Read more
Affected Products : avalanche- Published: Apr. 19, 2024
- Modified: May. 06, 2025
-
7.5
HIGHCVE-2025-28220
Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request.... Read more
- Published: Mar. 28, 2025
- Modified: May. 06, 2025
- Vuln Type: Denial of Service
-
8.1
HIGHCVE-2024-1557
Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 123.... Read more
Affected Products : firefox- Published: Feb. 20, 2024
- Modified: May. 06, 2025
-
5.9
MEDIUMCVE-2024-34535
In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header.... Read more
Affected Products : mastodon- Published: Oct. 03, 2024
- Modified: May. 06, 2025
-
7.5
HIGHCVE-2024-23526
An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory. ... Read more
Affected Products : avalanche- Published: Apr. 19, 2024
- Modified: May. 06, 2025
-
8.8
HIGHCVE-2024-24994
A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. ... Read more
Affected Products : avalanche- Published: Apr. 19, 2024
- Modified: May. 06, 2025
-
8.8
HIGHCVE-2024-24992
A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.... Read more
Affected Products : avalanche- Published: Apr. 19, 2024
- Modified: May. 06, 2025
-
8.8
HIGHCVE-2024-23535
A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. ... Read more
Affected Products : avalanche- Published: Apr. 19, 2024
- Modified: May. 06, 2025
-
6.5
MEDIUMCVE-2024-24991
A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks. ... Read more
Affected Products : avalanche- Published: Apr. 19, 2024
- Modified: May. 06, 2025
-
5.9
MEDIUMCVE-2024-44046
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themify Themify – WooCommerce Product Filter allows Stored XSS.This issue affects Themify – WooCommerce Product Filter: from n/a through 1.5.1.... Read more
Affected Products : woocommerce_product_filter- Published: Oct. 06, 2024
- Modified: May. 06, 2025
-
8.8
HIGHCVE-2024-24843
Cross-Site Request Forgery (CSRF) vulnerability in PowerPack Addons for Elementor PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a before 2.10.8. ... Read more
- Published: Feb. 21, 2024
- Modified: May. 06, 2025