CVE Watchtower

A vulnerability was identified in olivier-ls PHP-FTS up to 1.1.3. This impacts the function TrigramIndex::open of the file Storage.php. Such manipulat...

An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to, modification of, or disclosure of data...

The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.

Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without...

PrestaShop before 8.2.9 and 9.2.1 contains a broken access control vulnerability that allows an authenticated Webservice API key holder to read and mo...

PrestaShop before 8.2.9 and 9.2.1 contains an authorization flaw in the Webservice API that allows an attacker holding a key restricted to one shop to...

The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets.

rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability that allows unauthenticated ne...

This issue can cause a heap-use-after-free when an embedder unloads a ReloadableString buffer while a previously returned raw character pointer remain...

A flaw was found in GStreamer's adaptive streaming demuxers (HLS, DASH, MSS). When processing a media playlist or manifest, URIs referenced in th...

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed t...

Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for attackers with database wri...

Default credentials permit access through AcuXDBC.

The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accept...

Multiple hardcoded credentials are embedded within product components and administrative functionalities. These credentials may enable unauthorized ac...

XML parsers process attacker-influenced update manifests or network responses with external entity resolution enabled, potentially allowing XML Extern...

Shared telemetry and logging components store or transmit patient and doctor identifiers, clinical information, and low-entropy identifiers without ad...

Shared components expose hard-coded Access, workgroup, CCBasic, DBISAM, and related database credentials that are identical across installations.

Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations to protect credentials, IPC...

Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums. Some update pa...