Vulnerability Intelligence
Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.
Claris Filemaker Server < 26.0.3
An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect.…
Arista Velocloud Orchestrator >= 5.2.0, < 5.2.3.16
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality,…
F5 Big-ip Access Policy Manager >= 17.0.0, = 17.5.0, <= 17.5.1
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when…
WordPress WordPress < 4.7.37
WordPress Core Remote File Inclusion Vulnerability
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are…
Checkpoint Multi-domain Security Management >= r80, < r81.10
Check Point Multiple Products Path Traversal Vulnerability
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
Nvidia Infra Controller < 2.0.0
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to data tampering, denial of…
Nvidia Infra Controller < 2.0.0
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of…
Nvidia Infra Controller < 2.0.0
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and…
Nvidia Infra Controller < 2.0.0
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service,…
Adobe Campaign <= 7.4.3
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A…