** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.Read More ...
Continue Reading
December 31, 2022
Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1.Read More ...
Continue Reading
December 30, 2022
Incorrect implementation in authentication protocol in M-Files Server before 22.5.11356.0 allows high privileged user to get other users tokens to another resource.Read More ...
Continue Reading
December 30, 2022
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue Reading
December 30, 2022
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue Reading
December 30, 2022
In the fix for CVE-2022-24697, a blacklist is used to filter user input commands. But there is a risk of being bypassed. The user can control the command by controlling the kylin.engine.spark-cmd para ...
Continue Reading
December 30, 2022
Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request.Read More ...
Continue Reading
December 30, 2022
A vulnerability was found in pastebinit up to 0.2.2 and classified as problematic. Affected by this issue is the function pasteHandler of the file server.go. The manipulation of the argument r.URL.Pat ...
Continue Reading
December 30, 2022
Back to Main
