CVE-2025-0769

PixelYourSite - Your smart PIXEL TAG and API Manager 10.1.1.1 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/modules/facebook/facebook-server-a sync-task.php...

CVE-2025-22645

Improper Restriction of Excessive Authentication Attempts vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows Password Brute Forcing.This issue affects Real Estate Manager: from n/a through = 7.3...

CVE-2025-23411

mySCADA myPRO Manager is vulnerable to cross-site request forgery CSRF, which could allow an attacker to obtain sensitive information. An attacker would need to trick the victim in to visiting an attacker-controlled website...

Azure Linux 3.0 Security Update: cert-manager / influxdb / keda / libcontainers-common / packer (CVE-2024-6104)

The version of cert-manager / influxdb / keda / libcontainers-common / packer installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6104 advisory. - go-retryablehttp prior to 0.7.7 did not sanitize urls...

CVE-2022-21516

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Install. Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-11016

IntelMQ Manager from version 1.1.0 and before version 2.1.1 has a vulnerability where the backend incorrectly handled messages given by user-input in the "send" functionality of the Inspect-tool of the Monitor component. An attacker with access to the IntelMQ Manager could possibly use this issue...

CVE-2024-12821

The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the upmuploadmedia function in all versions up to, and including, 3.12.0. This makes it possible for authenticated...

CVE-2024-12822 Media Manager for UserPro <= 3.12.0 - Missing Authorization to Unauthenticated Arbitrary Options Update

The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the addcaptoimg function in all versions up to, and including, 3.11.0. This makes it possible for unauthenticated...

CBL Mariner 2.0 Security Update: cert-manager (CVE-2024-12401)

The version of cert-manager installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12401 advisory. - A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data tha...

CVE-2025-22710

CVE-2025-22710 is an SQL Injection (Improper Neutralization of Special Elements in SQL Commands) affecting StoreApps Smart Manager for WordPress, with affected range listed as Smart Manager: from n/a through 8.52.0. The CVE description specifies a Blind SQL Injection vulnerability and a CVSS v3.1...

Selesta Visual Access SQL Injection Vulnerability (CNVD-2025-22546)

Selesta Visual Access Manager is a visual access manager from Selesta. A SQL injection vulnerability exists in Selesta Visual Access Manager. An attacker can exploit this vulnerability to perform SQL injection in the GET parameter of /monitor/sterminal.php...

CVE-2025-22394

Dell Display Manager, versions prior to 2.3.2.18, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to code execution and possibly privilege escalation...

CVE-2024-45338 affecting package cert-manager for versions less than 1.11.2-17

CVE-2024-45338 affecting package cert-manager for versions less than 1.11.2-17. A patched version of the package is available...

CVE-2024-37241

Cross-Site Request Forgery CSRF vulnerability in Automattic WP Job Manager - Resume Manager allows Cross Site Request Forgery.This issue affects WP Job Manager - Resume Manager: from n/a through 2.1.0...

CVE-2024-45337 affecting package cert-manager for versions less than 1.11.2-16

CVE-2024-45337 affecting package cert-manager for versions less than 1.11.2-16. A patched version of the package is available...

CVE-2024-9779

CVE-2024-9779 – Open Cluster Management (OCM) is described across OSV/GHSA entries as a trust-boundary vulnerability in the cluster-manager workflow. The issue arises when a worker-node host runs the cluster-manager pod using a service account named “cluster-manager” bound to a ClusterRole that i...

Syncfusion Essential Studio for ASP.NET MVC 安全漏洞

Syncfusion Essential Studio for ASP.NET MVC is a set of server-side wrappers powered by Essential JavaScript from Syncfusion. A security vulnerability exists in Syncfusion Essential Studio for ASP.NET MVC prior to version 27.1.55, which stems from a traversal issue with the file manager in...

Denial Of Service (DoS)

github.com/cert-manager/cert-manager is vulnerable to Denial Of Service DoS. The vulnerability is due to the way cert-manager processes specially crafted invalid PEM data using the pem.Decode function in the standard library, allows an attacker who can modify PEM data read by cert-manager—such as...

The vulnerability of the Microsoft System Center Operations Manager (SCOM) software for managing and monitoring IT services, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the Microsoft System Center Operations Manager SCOM software for managing and monitoring IT services is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-52835 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...