The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_folder function in versions up to, and including, 2.18.16. This makes i ...
Continue Reading
February 08, 2023
An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a pair confirm message with wrong values.Read More ...
Continue Reading
February 08, 2023
An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device.Read More ...
Continue Reading
February 08, 2023
Onedev is a self-hosted Git Server with CI/CD and Kanban. In versions prior to 7.9.12 the algorithm used to generate access token and password reset keys was not cryptographically secure. Existing nor ...
Continue Reading
February 08, 2023
An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a cleartext encryption pause request.Read More ...
Continue Reading
February 08, 2023
In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.Read More ...
Continue Reading
February 07, 2023
A vulnerability was found in XpressEngine up to 1.4.4. It has been rated as critical. This issue affects some unknown processing of the component Update Query Handler. The manipulation leads to sql in ...
Continue Reading
February 07, 2023
Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker to execute arbitrary code via the formWlanMP function.Read More ...
Continue Reading
February 07, 2023
Back to Main
