CVE-2022-24806

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
CVE-2022-24807

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
CVE-2022-24805

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
encurtador.com.br Cross Site Scripting vulnerability OBB-2806306

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

Continue Reading
Johnson Controls Metasys ADS, ADX, OAS

## 1. EXECUTIVE SUMMARY * **CVSS v3 5.3** * **ATTENTION:** Exploitable remotely/low attack complexity * **Vendor:** Johnson Controls, Inc * **Equipment:** Metasys ADS, ADX, OAS with MUI * ** ...

Continue Reading
CVE-2022-36313

An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would ...

Continue Reading
CVE-2022-34767

Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the password, located at "admin" allows changing the http[s]://wizardpwd.asp/cgi-bin. Does ...

Continue Reading
CVE-2022-32430

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.Read More ...

Continue Reading

Back to Main

Subscribe for the latest news: