CVE-2021-25656

Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected versions include 7.0 through 7.2.3 without hotfix and 8.0.0 without hotfix...

Security Bulletin: PowerHA System Mirror for AIX vulnerability

Summary IBM PowerHA could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. Vulnerability Details CVEID: CVE-2020-4832 DESCRIPTION: IBM PowerHA could allow a local attacker to obtain sensitive information from temporary directories...

CVE-2019-9669

The Wordfence plugin 7.2.3 for WordPress allows XSS via a unique attack vector. NOTE: It has been asserted that this is not a valid vulnerability in the context of the Wordfence WordPress plugin as the firewall rules are not maintained as part of the Wordfence software but rather it is a set of...

CVE-2015-5947

SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code...

CVE-2017-5600

The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging a default privileged account...