Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 79 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-xxrc-g5c2-523g |
10.0 (3.1)
|
Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154. | 2026-08-18T15:31:45Z | 2026-08-18T21:31:43Z |
| ghsa-xx5w-j8g7-4v5f |
10.0 (3.1)
|
An argument injection vulnerability has been identified in the administrative web interface of the… | 2023-12-05T09:33:27Z | 2023-12-13T18:30:59Z |
| ghsa-xw3v-hx8p-r8v7 |
10.0 (4.0)
|
A vulnerability allowing remote unauthenticated code execution on the agent host. | 2026-08-04T18:31:29Z | 2026-08-04T18:31:29Z |
| ghsa-xvh6-w8q3-q5g8 |
10.0 (3.1)
9.3 (4.0)
|
A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the functi… | 2026-08-18T15:31:49Z | 2026-08-18T15:31:49Z |
| ghsa-xvg3-q6r5-8fhf |
10.0 (3.1)
|
Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server befor… | 2023-01-03T06:30:21Z | 2023-01-05T15:30:28Z |
| ghsa-xv32-fpqh-v67r |
9.8 (3.1)
10.0 (4.0)
|
An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and e… | 2025-06-26T21:31:03Z | 2025-07-09T21:31:06Z |
| ghsa-xrc8-933j-f74c |
10.0 (3.1)
|
Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate p… | 2026-04-03T00:31:09Z | 2026-04-03T00:31:09Z |
| ghsa-xr5v-45r7-33pq |
10.0 (3.1)
|
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in wh… | 2022-05-24T16:52:41Z | 2024-04-04T01:34:12Z |
| ghsa-xqpc-xqhc-3crx |
10.0 (3.1)
|
In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2… | 2026-06-19T15:33:15Z | 2026-06-19T15:33:15Z |
| ghsa-xprj-wrvh-8ppj |
10.0 (3.1)
|
The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all v… | 2024-06-13T03:30:46Z | 2024-06-13T03:30:46Z |
| ghsa-xp8c-vfh9-64v5 |
10.0 (3.1)
|
There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote at… | 2023-10-03T12:30:20Z | 2024-04-04T08:06:48Z |
| ghsa-xmr7-v6qh-4cp6 |
10.0 (3.1)
|
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate pri… | 2026-06-05T00:31:52Z | 2026-06-05T00:31:52Z |
| ghsa-xmmp-pp2j-r7jm |
10.0 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in jumpdemand 4ECPS Web Forms allows … | 2025-01-09T18:32:14Z | 2026-04-01T18:33:05Z |
| ghsa-xmfw-jv4v-9m93 |
10.0 (3.1)
|
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Monitoring Man… | 2022-05-13T01:20:08Z | 2022-05-13T01:20:08Z |
| ghsa-xm98-3vcf-fph7 |
10.0 (4.0)
|
mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server | 2026-08-24T19:20:58Z | 2026-08-24T19:20:58Z |
| ghsa-xm6j-mv8r-9mhp |
10.0 (3.1)
|
VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain p… | 2022-05-17T02:21:01Z | 2022-05-17T02:21:01Z |
| ghsa-xjrj-4jhg-7qmh |
10.0 (3.1)
10.0 (4.0)
|
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gat… | 2026-08-14T21:31:32Z | 2026-08-14T21:31:32Z |
| ghsa-xjr9-gg9q-jx3v |
10.0 (3.1)
|
CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation | 2026-06-19T20:47:11Z | 2026-06-19T20:47:11Z |
| ghsa-xj5x-4c9j-jr89 |
10.0 (3.1)
|
Sensitive data disclosure and manipulation due to improper authentication. The following products a… | 2026-02-20T03:31:39Z | 2026-02-20T03:31:39Z |
| ghsa-xhjf-xjwg-rm34 |
10.0 (3.1)
|
In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer … | 2024-03-14T18:30:30Z | 2024-08-05T15:30:50Z |
| ghsa-xhj7-3r6j-f89h |
10.0 (3.1)
10.0 (4.0)
|
Download of code without integrity check, inclusion of functionality from untrusted control sphere,… | 2026-08-19T21:30:36Z | 2026-08-26T21:31:28Z |
| ghsa-xh25-q4c4-w86w |
6.7 (3.1)
10.0 (4.0)
|
In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root ca… | 2024-12-05T00:34:59Z | 2024-12-18T21:30:52Z |
| ghsa-xgjj-x9g2-jxw7 |
10.0 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in Genetech Pie Register Premium.This… | 2024-12-09T15:31:36Z | 2026-04-28T21:35:22Z |
| ghsa-xfg6-62px-cxc2 |
10.0 (3.1)
|
Duplicate Advisory: SQL injection in pgjdbc | 2024-02-19T15:30:38Z | 2024-06-10T18:30:52Z |
| ghsa-xfch-mq3g-x27h |
9.8 (3.1)
10.0 (4.0)
|
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Applicat… | 2025-09-29T21:30:27Z | 2025-10-09T18:30:27Z |
| ghsa-xf8w-x8cp-hcc5 |
10.0 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in Kognetiks Kognetiks Chatbot for Wo… | 2024-05-14T18:30:47Z | 2024-05-14T18:30:47Z |
| ghsa-xf88-3pmx-m4vw |
9.8 (3.1)
10.0 (4.0)
|
The acer_cgi.log file in the device firmware is accessible without authentication via the web inter… | 2026-05-29T09:31:06Z | 2026-06-08T12:30:28Z |
| ghsa-xf64-8mw2-4gr2 |
10.0 (3.1)
7.8 (4.0)
|
Traefik has a StripPrefix Route-Level Auth Bypass via Path Normalization | 2026-06-11T13:26:57Z | 2026-07-20T21:14:26Z |
| ghsa-xc8c-wpcx-484m |
9.8 (3.1)
10.0 (4.0)
|
Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.… | 2025-11-01T21:30:25Z | 2025-11-10T15:31:04Z |
| ghsa-xc32-5f4v-7g6x |
10.0 (3.1)
|
Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdc… | 2022-05-14T02:47:08Z | 2025-04-12T12:55:44Z |