API - API Security Blog

CVE-2022-46492

nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file read vulnerability via the component /api/Index/getFileBinary.Read More ...

December 22, 2022

Exploit for Missing Authorization in Pycord Development Pycord

# CVE-2022-36024 py-cord is a an API wrapper for Discord writte...Read More ...

December 22, 2022

CVSS3 - MEDIUM

Exploit for Vulnerability in Starwindsoftware Command Center

# CVE-2022-23858 A flaw was found in the REST API. An improperl...Read More ...

December 22, 2022

CVSS3 - HIGH

CVSS2 - HIGH

Exploit for Excessive Iteration in Mozilla Firefox Esr

# CVE-2021-43545 Using the Location API in a loop could have ca...Read More ...

December 22, 2022

CVSS3 - MEDIUM

CVSS2 - MEDIUM

Exploit for Vulnerability in Arubanetworks Edgeconnect Enterprise

# CVE-2022-37919 A vulnerability exists in the API of Aruba Edg...Read More ...

December 22, 2022

CVSS3 - HIGH

Exploit for Improper Encoding or Escaping of Output in Ibm Api Connect

# CVE-2021-38997 IBM API Connect V10.0.0.0 through V10.0.5.0, V...Read More ...

December 22, 2022

CVSS3 - MEDIUM

Exploit for Vulnerability in Golang Go

# CVE-2021-27919 archive/zip in Go 1.16.x before 1.16.1 allows ...Read More ...

December 22, 2022

CVSS3 - MEDIUM

CVSS2 - MEDIUM

Exploit for Cross-site Scripting in Owasp Enterprise Security Api

# CVE-2022-24891 ESAPI (The OWASP Enterprise Security API) is a...Read More ...

December 22, 2022

CVSS3 - MEDIUM

CVSS2 - MEDIUM