REMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only memory/file modified.Read More ...
Continue ReadingMarch 09, 2023
** DISPUTED ** Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for an example.com hosting provider when customer-website.example.com ...
Continue ReadingMarch 09, 2023
** DISPUTED ** Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element. NOTE: the vendor's position is that there have been important legitimate cross-domain configur ...
Continue ReadingMarch 09, 2023
wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the WebAssembly `i8x16.select` instruction which will produce th ...
Continue ReadingMarch 08, 2023
SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated users.Read More ...
Continue ReadingMarch 08, 2023
SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the local drive space, causing a denial of service condition.Read More ...
Continue ReadingMarch 08, 2023
There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by authorized users to reset passwords for other accounts.Read More ...
Continue ReadingMarch 08, 2023
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit.Read More ...
Continue ReadingMarch 08, 2023
Back to Main