Vulnerability Intelligence
Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.
Citrix Netscaler Application Delivery Controller >= 13.1, < 13.1-37.282
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.
Ahsay Cloud Backup Suite < 9.15.2.70
Ahsay AhsayCBS Improper Authentication Vulnerability
A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in…
Ahsay Cloud Backup Suite < 9.15.2.70
Ahsay AhsayCBS Command Injection Vulnerability
A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random…
Fortinet Fortimail >= 7.0.0, = 7.2.0, = 7.4.0, < 7.4.9
Fortinet FortiMail Path Traversal Vulnerability
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9, FortiMail…
Cisco Catalyst Sd-wan Manager < 20.9.10.1
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability…
Zammad Zammad < 7.2.2
Zammad GmbH Zammad Improper Privilege Management Vulnerability
Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root…
Zammad Zammad >= 6.3.0, <= 6.5.4
Zammad GmbH Zammad Session Fixation Vulnerability
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2,…
Pexip Pexip Infinity < 38.2
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort…
Joomcode Jc Tables < 1.21.1
Joomla Extension – joomcode.com – Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 – The front-end CRUD API controller performs no Joomla token validation and no authentication check on…
Jetbrains Youtrack < 2026.2.19197
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature