A vulnerability classified as problematic has been found in woo-popup Plugin up to 1.2.2. This affects an unknown part of the file admin/class-woo-popup-admin.php. The manipulation leads to cross site ...
Continue ReadingMarch 07, 2023
In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.Read More ...
Continue ReadingMarch 07, 2023
An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.Read More ...
Continue ReadingMarch 07, 2023
In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.Read More ...
Continue ReadingMarch 07, 2023
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture fileRead More ...
Continue ReadingMarch 07, 2023
In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.Read More ...
Continue ReadingMarch 07, 2023
Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. An outdated library, webbrowser, used by the ASA client ...
Continue ReadingMarch 07, 2023
In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion denial of service.Read More ...
Continue ReadingMarch 07, 2023
Back to Main