Know your exposure.
Stay ahead of threats.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

Rejected reason: Reserved in error; never associated with a vulnerability.

The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine, because the filter meant to strip template delimiters runs before a decoding step that reconstructs them, allowing an authenticated administrator to execute arbitrary template expressions server-side and read PHP constants such as the site's…

XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide a manipulated XML file to read local files accessible to the application process. If the application runs with elevated privileges…

Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbitrary SQL queries on PostgreSQL. The elevated privileges of the database account allow these capabilities to be chained together to execute operating system commands on t…

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vul…

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized operation.

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which could allow unauthenticated users to register and log in without being approved by an administrator when both features are enabled.