This candidate was in a CNA pool that was not assigned to any issues during 2021.Read More ...
Continue Reading
March 07, 2023
An arbitrary file upload vulnerability in the /admin/template.php component of shopEx EcShop v4.1.5 allows attackers to execute arbitrary code via a crafted PHP file.Read More ...
Continue Reading
March 07, 2023
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.Read More ...
Continue Reading
March 07, 2023
thmmniii/fbs-core is an open source feedback system for students. In versions prior to 1.5.3 when querying `subresults`, it is possible to query `subresults` from other users due to insufficient autho ...
Continue Reading
March 07, 2023
Directus is a real-time API and App dashboard for managing SQL database content. In versions prior to 9.16.0 users with read access to the `password` field in `directus_users` can extract the argon2 p ...
Continue Reading
March 07, 2023
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with view rights can execute arbitrary Groovy, Python or Velocity ...
Continue Reading
March 07, 2023
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit rights on a document can trigger an XAR import on a for ...
Continue Reading
March 07, 2023
A vulnerability, which was classified as critical, was found in Typora up to 1.5.5. Affected is an unknown function of the component WSH JScript Handler. The manipulation leads to code injection. An a ...
Continue Reading
March 07, 2023
Back to Main
