Vulnerability Intelligence
Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.
Commvault Commvault >= 11.36.0, < 11.36.123
Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor.
Commvault Commvault >= 11.36.0, < 11.36.123
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.
Xenforo Xenforo < 2.3.13
XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token pairs by submitting empty values for client_secret and code_verifier parameters. Attackers…
Microsoft Sql Server 2019 < 15.0.2190.7
Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
Microsoft Sql Server 2022 < 16.0.1200.5
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
Microsoft Windows 10 1607 < 10.0.14393.9512
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Okta Access Gateway < 2026.9.1
The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datastore configuration. The unsanitized values are substituted directly into the query string…
Adobe Commerce < 2.4.4
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An…
Misp-project Misp <= 2.5.45
Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery functionality. In feed processing, redirects were followed without validating the redirect scheme or destination.…
Librenms Librenms < 26.8.0
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL…