API - API Security Blog

Cross-site Scripting (XSS)

concrete5/concrete5 is vulnerable to Cross-site Scripting (XSS). The vulnerability exists via the name parameter on API integrations due to lack of sanitization which allows an attacker to inject and ...

May 24, 2023

CVSS3 - MEDIUM

Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Directory Server, IBM Security Directory Suite and IBM Security Verify Directory.

## Summary Multiple Security Vulnerabilities have been fixed in IBM Security Directory Server, IBM Security Directory Suite and IBM Security Verify Directory. ## Vulnerability Details ** CVEID: **[CVE ...

May 24, 2023

CVSS3 - CRITICAL

CVSS2 - MEDIUM

Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2022-3172)

## Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability in the Kubernetes API server that can cause clients to be redirected by an aggregated API server (SSRF) (CVE-2022-3172 ...

May 24, 2023

LeadPro CRM v1.0 – SQL Injection Vulnerability

Post ContentRead More ...

May 24, 2023

Screen SFT DAB 600/C – Authentication Bypass Reset Board Config Exploit

Post ContentRead More ...

May 24, 2023

Screen SFT DAB 600/C – Authentication Bypass Password Change Exploit

Post ContentRead More ...