PYSEC-2022-210

An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still r ...

Continue Reading
Log Injection in Apache Sling Commons Log and Apache Sling API

Apache Sling Commons Log Read More ...

Continue Reading
Log Injection in Apache Sling Commons Log and Apache Sling API

Apache Sling Commons Log Read More ...

Continue Reading
CVE-2022-32130

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company/down_resume/total/nature.Read More ...

Continue Reading
CVE-2022-32534

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell com ...

Continue Reading
modusinfinitum.eu Cross Site Scripting vulnerability OBB-2671592

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

Continue Reading
luther-gesellschaft.de Cross Site Scripting vulnerability OBB-2671589

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

Continue Reading
lifetvmedia.hu Cross Site Scripting vulnerability OBB-2671586

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

Continue Reading

Back to Main

Subscribe for the latest news: