Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to ...
Continue ReadingDecember 28, 2022
Some Dahua software products have a vulnerability of server-side request forgery (SSRF). An Attacker can access internal resources by concatenating links (URL) that conform to specific rules.Read More ...
Continue ReadingDecember 28, 2022
Heimdall Application Dashboard through 2.5.4 allows reflected XSS via "Application name" to the "Add application" page.Read More ...
Continue ReadingDecember 28, 2022
Some Dahua software products have a vulnerability of sensitive information leakage. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, ...
Continue ReadingDecember 28, 2022
A vulnerability, which was classified as problematic, was found in OpenMRS Appointment Scheduling Module up to 1.16.x. This affects the function getNotes of the file api/src/main/java/org/openmrs/modu ...
Continue ReadingDecember 27, 2022
A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file aws-android-sdk-core/src/main/java/com/amazonaws/util/XpathUtils.java ...
Continue ReadingDecember 27, 2022
A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to cross site scripting. T ...
Continue ReadingDecember 27, 2022
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2.Read More ...
Continue ReadingDecember 27, 2022
Back to Main