Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.2.Read More ...
Continue Reading
December 20, 2022
A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unauthenticated attacker to access the DNS server when the device is switched to the ...
Continue Reading
December 20, 2022
The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the WeakMap.prototype.set method. Exploiting this vulnerability leads to access to a h ...
Continue Reading
December 20, 2022
All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization.Read More ...
Continue Reading
December 20, 2022
All versions of package lite-dev-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code ...
Continue Reading
December 20, 2022
The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting (XSS) due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vuln ...
Continue Reading
December 20, 2022
WFS, Inc HeavenBurnsRed 2020.3.15.7141260 is vulnerable to Local Privilege Escalation.Read More ...
Continue Reading
December 20, 2022
The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerability may affect data confidentiality.Read More ...
Continue Reading
December 20, 2022
Back to Main
