Vulnerability Summary for the Week of April 7, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info n/a -- n/a  A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain…

Comments Off on Vulnerability Summary for the Week of April 7, 2025

Vulnerability Summary for the Week of March 31, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Aboobacker.--AB Google Map Travel  Cross-Site Request Forgery (CSRF) vulnerability in Aboobacker. AB Google Map Travel allows Cross Site Request…

Comments Off on Vulnerability Summary for the Week of March 31, 2025

Vulnerability Summary for the Week of March 24, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info n/a -- n/a  Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our…

Comments Off on Vulnerability Summary for the Week of March 24, 2025

Vulnerability Summary for the Week of March 17, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Synology--Unified Controller (DSMUC)  Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0353 and 1.3.0-0423…

Comments Off on Vulnerability Summary for the Week of March 17, 2025

Vulnerability Summary for the Week of March 10, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1E--1E Client  Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior…

Comments Off on Vulnerability Summary for the Week of March 10, 2025

Vulnerability Summary for the Week of March 3, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info n/a--n/a  Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via…

Comments Off on Vulnerability Summary for the Week of March 3, 2025

Vulnerability Summary for the Week of February 24, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info jupyterhub--ltiauthenticator  `jupyterhub-ltiauthenticator` is a JupyterHub authenticator for learning tools interoperability (LTI). LTI13Authenticator that was introduced in `jupyterhub-ltiauthenticator` 1.3.0 wasn't…

Comments Off on Vulnerability Summary for the Week of February 24, 2025

Vulnerability Summary for the Week of February 17, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info a1post--A1POST.BG Shipping for Woo  Cross-Site Request Forgery (CSRF) vulnerability in a1post A1POST.BG Shipping for Woo allows Privilege Escalation. This…

Comments Off on Vulnerability Summary for the Week of February 17, 2025

Vulnerability Summary for the Week of February 10, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info ABB--System 800xA  A vulnerability exists in the VideONet product included in the listed System 800xA versions, where VideONet is…

Comments Off on Vulnerability Summary for the Week of February 10, 2025

Vulnerability Summary for the Week of February 3, 2025

High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info .TUBE gTLD--.TUBE Video Curator  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in .TUBE gTLD .TUBE…

Comments Off on Vulnerability Summary for the Week of February 3, 2025