Versions of the package servst before 2.0.3 are vulnerable to Directory Traversal due to improper sanitization of the filePath variable.Read More ...
Continue ReadingJanuary 30, 2023
isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF.Read More ...
Continue ReadingJanuary 30, 2023
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingJanuary 30, 2023
WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a future value, e.g., because unauthenticated ...
Continue ReadingJanuary 30, 2023
Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.Read More ...
Continue ReadingJanuary 30, 2023
Static Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10.Read More ...
Continue ReadingJanuary 30, 2023
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.Read More ...
Continue ReadingJanuary 30, 2023
NOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a physician, assistant, or billing user) can have a JavaScript payload that is executed upon visiting the /users/ ...
Continue ReadingJanuary 30, 2023
Back to Main