bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable ...
Continue Reading
February 16, 2023
The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification. To mitigate this vulnerability, Firefox disabled support for DHE ciphersuites.Read More ...
Continue Reading
February 16, 2023
There was an open redirection vulnerability pollbot, which was used in https://pollbot.services.mozilla.com/ and https://pollbot.stage.mozaws.net/ An attacker could have redirected anyone to malicious ...
Continue Reading
February 16, 2023
TIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0_LCD_20200513, Firmware Version MV8.003, and Hardware Version CPF906-V5.0_LCD_20200513.Read More ...
Continue Reading
February 16, 2023
Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.Read More ...
Continue Reading
February 16, 2023
SiteServerCMS 7.1.3 sscms has a file read vulnerability.Read More ...
Continue Reading
February 16, 2023
A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk ...
Continue Reading
February 16, 2023
A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions may allow an authenticated attacker to obtain unauthorized access to files and ...
Continue Reading
February 16, 2023
Back to Main
