CVE - API Security Blog

CVE-2023-21816

Windows Active Directory Domain Services API Denial of Service VulnerabilityRead More ...

February 14, 2023

CVSS3 - HIGH

CVE-2023-22629

An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the newPath parameter. An authenticated attacker can upload any file and then move i ...

February 14, 2023

CVE-2023-23934

Werkzeug is a comprehensive WSGI web application library. Browsers may allow "nameless" cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application ...

February 14, 2023

CVE-2023-25577

Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug's multipart form data parser will parse an unlimited number of parts, including file parts. Parts can be a sm ...

February 14, 2023

CVE-2023-21820

Windows Distributed File System (DFS) Remote Code Execution VulnerabilityRead More ...

February 14, 2023

CVSS3 - HIGH

CVE-2023-21703

Azure Data Box Gateway Remote Code Execution VulnerabilityRead More ...

February 14, 2023

CVSS3 - MEDIUM