CVE-2026-5074 ARMember Premium <= 7.3.1 - Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' Parameter

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir0' parameter of the getprivatecontentdata AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient sanitization of the user-supplied parameter which is concatenated directly into...

CVE-2025-47220

A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLESIGNATURECUSTOMIMAGEPATH, which exists in the PDFSigner and the PAdESSigner, can be set to any path without any restrictions by an admin user. In the case that the provided path points to an...

PT-2025-46909

Name of the Vulnerable Software and Affected Versions Keyfactor SignServer versions prior to 7.3.1 Description Keyfactor SignServer has an issue with Incorrect Access Control. This allows for an authentication bypass. Recommendations Update Keyfactor SignServer to version 7.3.1 or later...

CVE-2025-47222

Keyfactor SignServer versions prior to 7.3.2 are vulnerable to a class name enumeration flaw. The issue occurs because properties requiring a class path do not return distinct errors regardless of whether the specified class exists in the deployment, allowing an attacker to gather information abo...

PT-2022-6004

Name of the Vulnerable Software and Affected Versions Adobe Campaign versions 7.3.1 and earlier Adobe Campaign versions 8.3.9 and earlier Description The issue is related to a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A low-privilege authenticat...

Cisco IOS XR 参数注入漏洞

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A command injection vulnerability exists in the CLI of Cisco IOS XR versions prior to 7.3.1. The vulnerability stems from insufficient input validation of user-supplied commands. An...