CVE-2015-10095

A vulnerability classified as problematic has been found in woo-popup Plugin up to 1.2.2. This affects an unknown part of the file admin/class-woo-popup-admin.php. The manipulation leads to cross site ...

Continue Reading
CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.Read More ...

Continue Reading
CVE-2023-24734

An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.Read More ...

Continue Reading
CVE-2021-36392

In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.Read More ...

Continue Reading
CVE-2023-1161

ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture fileRead More ...

Continue Reading
CVE-2021-36396

In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.Read More ...

Continue Reading
CVE-2023-0093

Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. An outdated library, webbrowser, used by the ASA client ...

Continue Reading
CVE-2021-36395

In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion denial of service.Read More ...

Continue Reading

Back to Main

Subscribe for the latest news: