This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerabilit ...
Continue Reading
March 29, 2023
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulner ...
Continue Reading
March 29, 2023
Coverity versions prior to 2023.3.2 are vulnerable to forced browsing, which exposes authenticated resources to unauthorized actors. The root cause of this vulnerability is an insecurely configured se ...
Continue Reading
March 29, 2023
A vulnerability, which was classified as problematic, has been found in Xunrui CMS 4.61. This issue affects some unknown processing of the file /dayrui/My/View/main.html. The manipulation leads to inf ...
Continue Reading
March 29, 2023
The Mega Main Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 2.2.2 due to insufficient input sanitization ...
Continue Reading
March 29, 2023
Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under the Create Ticket function.Read More ...
Continue Reading
March 29, 2023
Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:AdwCleanerLogsAdwCleaner_Debug.log in which the target location is user-controllable, allowing a ...
Continue Reading
March 29, 2023
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20.Read More ...
Continue Reading
March 29, 2023
Back to Main
