Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v2.6.0-rc1 have an output sanitization bug which leaks repository access credentials in ...
Continue Reading
February 08, 2023
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload.Read More ...
Continue Reading
February 08, 2023
An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.Read More ...
Continue Reading
February 08, 2023
Bosch Security Systems B420 firmware 02.02.0001 employs IP based authorization in its authentication mechanism, allowing attackers to access the device as long as they are on the same network as a leg ...
Continue Reading
February 08, 2023
A flaw (CVE-2022-38900) was discovered in one of Kibanaâs third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.Read More ...
Continue Reading
February 08, 2023
Cross-site scripting (XSS) vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic information page.Read More ...
Continue Reading
February 08, 2023
HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service (KMS) defined in the configuration file, new credentials created after ...
Continue Reading
February 08, 2023
SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbitrary commands via the ad parameter to /admin_area/login_transfer.php.Read More ...
Continue Reading
February 08, 2023
Back to Main
