Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
The CMSMasters Content Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's multiple shortcodes in all versions up to, and including, 1.8.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authen...
Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
AFFECTED_PRODUCTS:
Google Chrome
Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
AFFECTED_PRODUCTS:
Google Chrome
An improper authorization vulnerability exists in the Rockwell Automation affected products that could allow an unauthorized user to sign in. While removal of all role mappings is unlikely, it could occur in the case of unexpected or accidental removal by the administrator. If exploited, an unauthor...
An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory.
Improper check for unusual or exceptional conditions in Intel(R) TDX Module firmware before version 1.5.06 may allow a privileged user to potentially enable information disclosure via local access.
Livewire is a full-stack framework for Laravel that allows for dynamic UI components without leaving PHP. In livewire/livewire prior to `2.12.7` and `v3.5.2`, the file extension of an uploaded file is guessed based on the MIME type. As a result, the actual file extension from the file name is not va...
AFFECTED_PRODUCTS:
Laravel Livewire,
Laravel Livewire
Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially exposed in system logs which may be persisted. The access token in `req.query` is not redacted when the `LOG_STYLE` is set to `raw`. If these logs ar...
AFFECTED_PRODUCTS:
Monospace Directus
TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected us...
AFFECTED_PRODUCTS:
Typo3 Typo3,
Typo3 Typo3,
Typo3 Typo3
... (+1)
Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a response without any preloaded data. This issue only affects anonymous visitors of the site. This problem has been patched in the latest version of Discourse. U...
AFFECTED_PRODUCTS:
Discourse Discourse
Insecure permissions in the Bluetooth Low Energy (BLE) component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service (DoS).
PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the Category Managment feature
AFFECTED_PRODUCTS:
Publiccms Publiccms
Microsoft Office Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Office Long Term Servicing Channel,
Microsoft Office Long Term Servicing Channel
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+7)
Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.
AFFECTED_PRODUCTS:
Microsoft Defender For Endpoint
Power BI Report Server Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Power Bi Report Server
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Microsoft Office Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Office,
Microsoft Office Long Term Servicing Channel
... (+1)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Outlook for Android Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Outlook
Visual Studio Collector Service Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Visual Studio,
Microsoft Visual Studio 2017,
Microsoft Visual Studio 2019
... (+4)
Visual Studio Code for Linux Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Visual Studio Code
Remote Desktop Client Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Azure Command Line Interface,
Microsoft Azure Service Connector
Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Visual Studio 2017,
Microsoft Visual Studio 2019,
Microsoft Visual Studio 2019
... (+4)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Code Integrity Guard Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+7)
Windows Scripting Engine Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022,
Microsoft Windows 11 22h2
... (+3)
Winlogon Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+23)
Remote Desktop Protocol Server Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+7)
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+7)
Microsoft Office Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Office Long Term Servicing Channel
Windows Hyper-V Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows Server 2022
... (+1)
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022,
Microsoft Windows 10 21h2
... (+5)
Windows MSHTML Platform Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+18)
Microsoft Management Console Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+19)
Sudo for Windows Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 11 24h2
Windows Kernel Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+23)
Windows Hyper-V Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+2)
Windows Network Address Translation (NAT) Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+10)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+14)
Windows Network Address Translation (NAT) Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+10)