This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue Reading
February 20, 2023
In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts.Read More ...
Continue Reading
February 20, 2023
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/Lo ...
Continue Reading
February 20, 2023
app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_params and additional_delimiters.Read More ...
Continue Reading
February 20, 2023
Liima before 1.17.28 allows server-side template injection.Read More ...
Continue Reading
February 20, 2023
Liima before 1.17.28 allows Hibernate query language (HQL) injection, related to colToSort in the deployment filter.Read More ...
Continue Reading
February 20, 2023
A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. ...
Continue Reading
February 19, 2023
A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. ...
Continue Reading
February 19, 2023
Back to Main
