KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker ...
Continue Reading
January 04, 2023
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.Read More ...
Continue Reading
January 04, 2023
ViewVC is a browser interface for CVS and Subversion version control repositories. Versions prior to 1.2.3 and 1.1.30 are vulnerable to cross-site scripting. The impact of this vulnerability is mitiga ...
Continue Reading
January 04, 2023
Http4s is a Scala interface for HTTP services. Starting with version 0.1.0 and prior to versions 0.21.34, 0.22.15, 0.23.17, and 1.0.0-M38, the `User-Agent` and `Server` header parsers are susceptible ...
Continue Reading
January 04, 2023
Uniswap Universal Router before 1.1.0 mishandles reentrancy. This would have allowed theft of funds.Read More ...
Continue Reading
January 04, 2023
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.Read More ...
Continue Reading
January 04, 2023
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none.Read More ...
Continue Reading
January 04, 2023
Code Injection in GitHub repository lirantal/daloradius prior to master-branch.Read More ...
Continue Reading
January 04, 2023
Back to Main
