PT-2025-48358

Name of the Vulnerable Software and Affected Versions Kiteworks MFT versions prior to 9.1.0 Description Kiteworks MFT orchestrates end-to-end file transfer workflows. Versions of the software prior to 9.1.0 contain a flaw that could allow an external attacker to access log information from the...

CVE-2024-1721

Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1...

CVE-2021-22933

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform an arbitrary file delete via a maliciously crafted web request...

PT-2024-39232 · WordPress · Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: The Quiz and Survey Master QSM WordPress plugin versions prior to 9.1.3 Description: The issue is related to the Quiz and Survey Master QSM WordPress plugin, which does not properly sanitise and escape some of its settings. This could allow...

Pulse Secure Pulse Connect Secure Cross-Site Scripting Vulnerability (CNVD-2020-60094)

Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse is a suite of SSL VPN solutions from Pulse Secure in the United States. A cross-site scripting vulnerability exists in Pulse Connect Secure versions prior to 9.1R9, which stems from a vulnerability in the web...

Foxit Reader and PhantomPDF Remote Code Execution Vulnerability (CNVD-2018-11907)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A remote code execution vulnerability exists in the handling of pdf files with u3d images in Foxit Reader versions prior to 9.1 and PhantomPDF versions prior to 9.1. A remote...

Apple iOS Arbitrary Code Execution Vulnerability

Apple iOS is an operating system for handheld devices developed by Apple Inc. An arbitrary code execution vulnerability exists in Apple iOS versions prior to 9.1, OS X versions prior to 10.11.1. It allows remote attackers to execute arbitrary code via an unknown network connection request...