API - API Security Blog

Post ContentRead More ...

November 28, 2022

Belkin Wemo UPnP API OS Command Injection (CVE-2019-12780)

A command injection vulnerability exists in Belkin Wemo. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected...Read More ...

November 28, 2022

CVSS3 - CRITICAL

CVSS2 - HIGH

Researchers Detail AppSync Cross-Tenant Vulnerability in Amazon Web Services

[ ![Vulnerability](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEiEZoUe9wuUok0XcxVIDQICe6w0xI5_BtVH78G4c5QpXp_gXXWDMLA7_TMHy-tB-UqjYFEijDrwCl5c_N1D_RohWXvThSTKkcND18N3ju70auGExVHzvAmlEUyjV ...

November 28, 2022

(RHSA-2022:8634) Moderate: OpenShift API for Data Protection (OADP) 1.1.1 security and bug fix update

OpenShift API for Data Protection (OADP) enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both f ...

November 27, 2022

CVSS3 - CRITICAL

CVSS2 - MEDIUM

Kubeeye – Tool To Find Various Problems On Kubernetes, Such As Application Misconfiguration, Unhealthy Cluster Components And Node Problems

[![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgC9cGVhns7OIQ5LhtNpbL1aINjWADdF_mNpqku1e9V_zqpSTjrTbIhkvksZwzLVAkis2xrWvC8hvrhqyHtLTmlsJISyodcxJKdEItg7nyE_apCR9i2FV9CIf4a9jvz9Twl9v4hfB ...

November 27, 2022

CVE-2022-45932

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java deleteRole function is affected whe ...

November 26, 2022

CVE-2022-45931

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore.java deleteUser function is affected whe ...

November 26, 2022

CVE-2022-45930

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainStore.java deleteDomain function is affected ...

November 26, 2022