Browsing: Alerts

HomeDescriptionNewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and…

<p>Solid Edge is affected by improper certificate validation while connecting to License Service endpoint. This could allow an unauthenticated remote…

<p>Siemens Software Center and Solid Edge is affected by a DLL hijacking vulnerability. This could allow an attacker to execute…

CVSSv3 Score: 7.9 An improper neutralization of special elements used in an SQL command (‘SQL Injection’) vulnerability [CWE-89] in FortiDDoS-F…

Serial number: AV26-166Date: February 25, 2026Updated: April 20, 2026 On February 25, 2026, Cisco published security advisories to address critical vulnerabilities in the…

Overview A remote code execution vulnerability has been discovered in the SGLang project, specifically in the reranking endpoint (/v1/rerank). A…

CVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability CVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability CVE-2025-2749 Kentico Xperience Path Traversal Vulnerability CVE-2025-32975…

HomeDescriptionVvveb CMS 1.0.8 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute…

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentication is not…

CVSSv3 Score: 4.4 An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiWeb may allow a privileged authenticated attacker to perform…