Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at ...
Continue ReadingJune 02, 2022
BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The payload gets executed in the browser of the victim in the "Share room access" dial ...
Continue ReadingJune 02, 2022
Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post.Read More ...
Continue ReadingJune 02, 2022
NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution.Read More ...
Continue ReadingJune 02, 2022
An attacker with physical access to the victim's device can bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynami ...
Continue ReadingJune 02, 2022
A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the inpu ...
Continue ReadingJune 02, 2022
NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.Read More ...
Continue ReadingJune 02, 2022
Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=save_car.Read More ...
Continue ReadingJune 02, 2022
Back to Main