Vulnerability Intelligence
Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.
Microsoft Azure Arc
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Microsoft Azure Logic Apps
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Cisco Identity Services Engine 3.1.0
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint.…
Nlnetlabs Unbound < 1.26.1
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting…
Hp Linux Imaging And Printing < 3.26.6
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or…
Nlnetlabs Unbound < 1.26.1
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code…
Hp Linux Imaging And Printing < 3.26.6
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or…
Hp Linux Imaging And Printing < 3.26.6
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or…
Dell Objectscale < 4.4.0.0
Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Concretecms Concrete Cms < 9.5.4
Concrete CMS below 9.5.4 did not validate the user timezone value (uTimezone) on write and rendered it without output encoding on the Dashboard user management page, where Date::getTimezoneDisplayName() returns any non-IANA value…