CVE Watchtower

An unauthenticated remote attacker can perform an authentication bypass on the com_check function, potentially triggering traffic on other systems and...

An unauthenticated remote attacker can perform a CSRF attack on a logged in backend user allowing for execution of multiple critical system actions. T...

An unauthenticated remote attacker can perform a DoS in the backends backup creation function. This can result in a total loss of availability.

A high privileged remote attacker can perform a code injection in the backends backup restore function leading to code execution. This can result in a...

A high privileged remote attacker can perform an OpenSSL code injection in the backends ImportPKCS12 function leading to code execution. This can resu...

A high privileged remote attacker can perform an OpenSSL code injection in the frontends device importer function leading to code execution. This can ...

A high privileged remote attacker can perform a code injection in the backends patch activate function leading to code execution. This can result in a...

A high privileged remote attacker can perform a code injection in the backends network auth function leading to code execution. This can result in a t...

A flaw was found in the keycloak-services component of Keycloak, which provides the core authentication and authorization logic for the identity provi...

The ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to S...

The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Notification Dynamic-Data action_hook → Media ...

The WPML Multilingual CMS plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in versions up to, and including, 4.9.7. This...

The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to file deletion d...

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.54 via the uac...

A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution. This flaw can o...

A vulnerability that could allow an attacker to gain unauthorized access.

A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication l...

It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could be used to ...

Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege escalation.

The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protecte...