HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, `virtio.c` has is a call to `vc_cfgread` that does not check for null which ...
Continue ReadingFebruary 18, 2023
HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, ` vi_pci_write` has is a call to `vc_cfgwrite` that does not check for null ...
Continue ReadingFebruary 18, 2023
TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.Read More ...
Continue ReadingFebruary 17, 2023
The dropdown menu in jspreadsheet before v4.6.0 was discovered to be vulnerable to cross-site scripting (XSS).Read More ...
Continue ReadingFebruary 17, 2023
The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions.Read More ...
Continue ReadingFebruary 17, 2023
QVidium Technologies Amino A140 (prior to firmware version 1.0.0-283) was discovered to contain a command injection vulnerability.Read More ...
Continue ReadingFebruary 17, 2023
Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts o ...
Continue ReadingFebruary 17, 2023
In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a l ...
Continue ReadingFebruary 17, 2023
Back to Main