Cross Site Scripting (XSS) vulnerability in the DataTables plug-in 1.9.2 for jQuery allows attackers to run arbitrary code via the sBaseName parameter to function _fnCreateCookie. NOTE: 1.9.2 is a ver ...
Continue ReadingMarch 07, 2023
QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality.Read More ...
Continue ReadingMarch 07, 2023
In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk.Read More ...
Continue ReadingMarch 07, 2023
In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk.Read More ...
Continue ReadingMarch 07, 2023
A use-after-free flaw was found in the Linux kernelâs SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet ...
Continue ReadingMarch 07, 2023
A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images. ...
Continue ReadingMarch 07, 2023
rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.Read More ...
Continue ReadingMarch 07, 2023
In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.Read More ...
Continue ReadingMarch 07, 2023
Back to Main