Advisory Catalog

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

Apache ActiveMQ Improper Input Validation Vulnerability

Fortinet FortiClient EMS Improper Access Control Vulnerability

Google Dawn Use-After-Free Vulnerability

TrueConf Client Download of Code Without Integrity Check Vulnerability

Aquasecurity Trivy Embedded Malicious Code Vulnerability

Citrix NetScaler Out-of-Bounds Read Vulnerability

Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Google Skia Out-of-Bounds Write Vulnerability

Lantronix EDS5000 Code Injection Vulnerability

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

Qualcomm Multiple Chipsets Memory Corruption Vulnerability

Broadcom VMware Aria Operations Command Injection Vulnerability

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

Google Chromium CSS Use-After-Free Vulnerability

Soliton Systems K.K FileZen OS Command Injection Vulnerability

Apple Multiple Buffer Overflow Vulnerability

Microsoft Windows Improper Privilege Management Vulnerability

Microsoft Windows NULL Pointer Dereference Vulnerability

Microsoft Windows Type Confusion Vulnerability

Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

Microsoft Windows Shell Protection Mechanism Failure Vulnerability

Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

Fortinet FortiClient EMS SQL Injection Vulnerability

Notepad++ Download of Code Without Integrity Check Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

SolarWinds Web Help Desk Security Control Bypass Vulnerability

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

Microsoft Office Security Feature Bypass Vulnerability

SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

Langflow affected by Remote Code Execution via validate_code() exec()

SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

Cisco Unified Communications Products Code Injection Vulnerability

GNU InetUtils Argument Injection Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft Windows Information Disclosure Vulnerability

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability