Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts of users involved in their tickets using the Zammad API.Rea ...
Continue ReadingMay 02, 2023
Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized changes on articles where they only have cus ...
Continue ReadingMay 02, 2023
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.Read More ...
Continue ReadingMay 02, 2023
A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argumen ...
Continue ReadingMay 02, 2023
A vulnerability was found in Funadmin up to 3.2.3. It has been declared as problematic. Affected by this vulnerability is the function tagLoad of the file Cx.php. The manipulation of the argument file ...
Continue ReadingMay 02, 2023
Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to retrieve usage information on folders in user v ...
Continue ReadingMay 02, 2023
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4.Read More ...
Continue ReadingMay 02, 2023
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingMay 02, 2023
Back to Main