Vulnerability Intelligence
Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.
Apple Ipados < 18.7.11
Apple Multiple Products Out-of-Bounds Write Vulnerability
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing…
A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp Handler. This manipulation causes missing authentication. The attack is possible to be carried out…
A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the file menu_nat_more.asp of the component Web Administration Service. The manipulation of the argument opt…
Ordasoft Real Estate Manager < 6.7.9
Joomla Extension – ordasoft.com – Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 – site/realestatemanager.php builds the ORDER BY clause of three separate frontend property-listing queries (category browsing, search results,…
Ordasoft Vehicle Manager < 6.5.8
Joomla Extension – ordasoft.com – Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 – site/vehiclemanager.php reads the order_field and order_direction sort parameters at three separate anonymous-reachable frontend entry points (category listing,…
A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the component MmtAtePrase Parser. This manipulation causes stack-based buffer overflow. Remote exploitation of the attack…
A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /ap_ip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os…
Ordasoft Book Library < 6.4.6
Joomla Extension – ordasoft.com – Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 – site/booklibrary.php’s books() function reads the field and direction request parameters and passes each through a function called…
Pyjwt Project Pyjwt 2.13.0
PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.from_jwk is affected because PyJWK verification path used the decoded key without applying prepare_key validation. This occurs when…
Pyjwt Project Pyjwt < 2.14.0
PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not revalidated against the JWKS trust boundary. This occurs when a…