CVE-2024-41799

tgstation-server is a production scale tool for BYOND server management. Prior to 6.8.0, low permission users using the "Set .dme Path" privilege could potentially set malicious .dme ...

Continue Reading
JVN#26225832: EC-CUBE plugin (for EC-CUBE 4 series) “EC-CUBE Web API Plugin” vulnerable to stored cross-site scripting

EC-CUBE plugin (for EC-CUBE 4 series) "EC-CUBE Web API Plugin" provided by EC-CUBE CO.,LTD. contains a stored cross-site scripting vulnerability (CWE-79) in OAuth Management feature. ...

Continue Reading
Deploy API Security On-Premises with New Imperva API Security Anywhere Self-Managed Option

API Security Anywhere Self-Managed Option Imperva continues to deliver solutions that help customers protect their applications and APIs, whether in the Cloud, on-premises, or in a hybrid environment. ...

Continue Reading
CVE-2024-3219 Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connection

There is a MEDIUM severity vulnerability affecting CPython. The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, s ...

Continue Reading
CVE-2024-3219

There is a MEDIUM severity vulnerability affecting CPython. The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, s ...

Continue Reading
CVE-2024-3219

There is a MEDIUM severity vulnerability affecting CPython. The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, s ...

Continue Reading
CVE-2024-6431 Media.net Ads Manager <= 2.10.13 – Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload

The Media.net Ads Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and missing capability check in the 'sendMail' function in all vers ...

Continue Reading
Admidio has Blind SQL Injection in ecard_send.php

Description: An SQL Injection has been identified in the /adm_program/modules/ecards/ecard_send.php source file of the Admidio Application. The SQL Injection results in a compromise of the application ...

Continue Reading

Back to Main

Subscribe for the latest news: