### Impact XWiki Crypto API will generate X509 certificates signed by default using SHA1 with RSA, which is not considered safe anymore for use in certificate signatures, due to the risk of collisions ...
Continue ReadingMay 30, 2022
The affected Baker Hughes Bentley Nevada products (3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Con ...
Continue ReadingMay 30, 2022
An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.Read More ...
Continue ReadingMay 30, 2022
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php.Read More ...
Continue ReadingMay 30, 2022
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can ...
Continue ReadingMay 30, 2022
Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation.Read More ...
Continue ReadingMay 30, 2022
Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin Read More ...
Continue ReadingMay 30, 2022
TrueStack Direct Connect 1.4.7 has Incorrect Access Control.Read More ...
Continue ReadingMay 30, 2022
Back to Main