CVE-2023-25912 - Webreport disclosure to unauthorized actor in Danfoss AK-EM 100

CVE-2023-25911 - OS Command Injection in Danfoss AK-EM 100

CVE-2023-22586 - Local File Inclusion in Danfoss AK-EM 100

CVE-2023-22585 - Reflected Cross-Site Scripting in Danfoss AK-EM 100

CVE-2023-22584 - Cleartext credentials in Danfoss AK-EM 100

CVE-2023-22583 - SQL Injection in Danfoss AK-EM 100

CVE-2023-22581 - White Rabbit Switch - Unauthenticated remote code execution

CVE-2023-22580 - Sequalize - Bad query filtering leading to SQL errors

CVE-2023-22579 - Sequalize - Unsafe fall-through in getWhereConditions

CVE-2023-22578 - Sequalize - Default support for “raw attributes” when using parentheses

CVE-2023-22577 - White Rabbit Switch - Password Disclosure Vulnerability

CVE-2022-45052 - Local File Inclusion in Axiell Iguana CMS

CVE-2022-45051 - Reflected POST XSS in Axiell Iguana CMS

CVE-2022-45050 - Reflected XSS in Axiell Iguana CMS

CVE-2022-45049 - Reflected XSS in Axiell Iguana CMS

CVE-2022-41217 - Cloudflow - Unauthenticated file upload vulnerability

CVE-2022-41216 - Cloudflow - Local File Inclusion Vulnerability

CVE-2022-3901 - Visioweb.js - Prototype Pollution can results in XSS

CVE-2022-29823 - Feathers - Query “__proto__” is converted to real prototype

CVE-2022-29822 - Feathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection

CVE-2022-25153 - ITarian - Local privilege escalation in Endpoint Manager agent on Windows

CVE-2022-25152 - ITarian - Any user with a valid session token can create and execute agent procedures and bypass mandatory approvals

CVE-2022-25151 - ITarian - Session cookie not protected by HttpOnly flag

CVE-2022-24387 - File upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010

CVE-2022-24386 - Stored XSS in SmarterTrack v100.0.8019.14010

CVE-2022-24385 - Information disclosure via direct object access on SmarterTrack v100.0.8019.14010

CVE-2022-24384 - Reflective XSS on SmarterTrack v100.0.8019.14010

CVE-2022-2422 - Feathers - SQL injection via attribute aliases

CVE-2022-2421 - Socket.io - Improper type validation in attachment parsing

CVE-2022-0564 - Qlik sense Enterprise Domain User enumeration

CVE-2021-43977 - SmarterTools SmarterMail before 100.0.7803 allows XSS

CVE-2021-40387 - Authenticated Remote Code Execution in UniTrends Server < v10.5.5-2

CVE-2021-40386 - Undisclosed critical vulnerability in Unitrends Client, currently unpatched

CVE-2021-40385 - Privilege escalation from read-only to administrator in web interface of UniTrends Server < v10.5.5-2

CVE-2021-32234 - SmarterTools SmarterMail before Build 7776 allows RCE

CVE-2021-32233 - SmarterTools SmarterMail before Build 7776 allows XSS

CVE-2021-30201 - Unauthenticated XML External Entity vulnerability in Kaseya VSA < v9.5.6

CVE-2021-30121 - (Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.6

CVE-2021-30120 - 2FA bypass in Kaseya VSA <= v9.5.6

CVE-2021-30119 - Authenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6

CVE-2021-30118 - Unauthenticated Remote Code Execution in Kaseya VSA < v9.5.5

CVE-2021-30117 - Authenticated SQL injection in Kaseya VSA < v9.5.6

CVE-2021-30116 - Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6

CVE-2021-26474 - UNAUTHENTICATED SERVER SIDE REQUEST FORGERY IN VEMBU PRODUCTS

CVE-2021-26473 - Unauthenticated arbitrary file upload and command execution in Vembu products

CVE-2021-26472 - Unauthenticated remote command execution with SYSTEM privileges in Vembu products

CVE-2021-26471 - Unauthenticated remote command execution in Vembu products