This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingFebruary 24, 2023
pdf_info 0.5.3 is vulnerable to Command Execution.Read More ...
Continue ReadingFebruary 23, 2023
Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the configuration file (cfw-setting.yaml).Read More ...
Continue ReadingFebruary 23, 2023
SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).Read More ...
Continue ReadingFebruary 23, 2023
Gradio is an open-source Python library to build machine learning and data science demos and web applications. Versions prior to 3.13.1 contain Use of Hard-coded Credentials. When using Gradio's share ...
Continue ReadingFebruary 23, 2023
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.Read More ...
Continue ReadingFebruary 23, 2023
Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions from 0.9.0 to 0.12.0 (including) did not properly fail blocking read operations on TLS connections when the transport hit timeouts ...
Continue ReadingFebruary 23, 2023
SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was originally found in 5.5.1 GA.)Read More ...
Continue ReadingFebruary 23, 2023
Back to Main