Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attack.Read More ...
Continue Reading
March 24, 2023
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.1.Read More ...
Continue Reading
March 24, 2023
A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the inp ...
Continue Reading
March 24, 2023
GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. Prior to versions 2.20.6, 2.19.6, and 2.18.7, anonymous users can obtain sensitive ...
Continue Reading
March 24, 2023
smartCARS 3 is flight tracking software. In version 0.5.8 and prior, all persons who have failed login attempts will have their password stored in error logs. This problem doesn't occur in version 0.5 ...
Continue Reading
March 24, 2023
Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can change the display of group chats or force ...
Continue Reading
March 24, 2023
An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthen ...
Continue Reading
March 24, 2023
PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.Read More ...
Continue Reading
March 24, 2023
Back to Main
