Microsoft Office Visio Information Disclosure Vulnerability.Read More ...
Continue Reading
January 11, 2023
Microsoft Exchange Server Spoofing Vulnerability. This CVE ID is unique from CVE-2023-21762.Read More ...
Continue Reading
January 11, 2023
In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to enroll as mentors or edit any of their mentorship ...
Continue Reading
January 11, 2023
The jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert allows Remote Code Execution via nmap_scan.php (scan parameter) OS Command Injection.Read More ...
Continue Reading
January 11, 2023
** DISPUTED ** Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via D ...
Continue Reading
January 11, 2023
An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 firmware prior to V4.70(ABMH.8)C0, which could allow an unauthenticated attacker to ...
Continue Reading
January 11, 2023
The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pinvalidation target parameter.Read More ...
Continue Reading
January 11, 2023
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used ...
Continue Reading
January 11, 2023
Back to Main
