Symantec Endpoint Protection, prior to 14.3 RU6 (14.3.9210.6000), may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise t ...
Continue Reading
January 21, 2023
The Easy Digital Downloads WordPress Plugin, version Read More ...
Continue Reading
January 21, 2023
An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. There is XSS in Wikibase date formatting via wikibase-time-precision-* fields. This a ...
Continue Reading
January 21, 2023
An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. CheckUser TokenManager insecurely uses AES-CTR encryption with a repeated (aka re-use ...
Continue Reading
January 21, 2023
The Paid Memberships Pro WordPress Plugin, version Read More ...
Continue Reading
January 21, 2023
In Database Performance Analyzer (DPA) 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting.Read More ...
Continue Reading
January 21, 2023
In DPA 2022.4 and older releases, generated heap memory dumps contain sensitive information in cleartext.Read More ...
Continue Reading
January 21, 2023
Multiple cross-site scripting (XSS) vulnerabilities in ReQlogic v11.3 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the POBatch and WaitDuration paramete ...
Continue Reading
January 20, 2023
Back to Main
