An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary ownership.Read More ...
Continue ReadingMarch 10, 2023
Information Disclosure in Graphics during GPU context switch.Read More ...
Continue ReadingMarch 10, 2023
An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room.Read More ...
Continue ReadingMarch 10, 2023
An Information Disclosure vulnerability exists in AvantFAX 3.3.7. Backups of the AvantFAX sent/received faxes, and database backups are stored using the current date as the filename and hosted on the ...
Continue ReadingMarch 10, 2023
A Stored Cross-Site Scripting (XSS) vulnerability exists in AvantFAX 3.3.7. An authenticated low privilege user can inject arbitrary Javascript into their e-mail address which is executed when an admi ...
Continue ReadingMarch 10, 2023
An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port.Read More ...
Continue ReadingMarch 10, 2023
A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploading a specially crafted PHP file.Read More ...
Continue ReadingMarch 10, 2023
The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the uucss_update_rule function in versions up to, and inc ...
Continue ReadingMarch 10, 2023
Back to Main