In Grafana Enterprise Metrics (GEM) before 1.7.1 and 2.x before 2.3.1, after creating an Access Policy that is granted access to all tenants as well as specified a specific label matcher, the label ma ...
Continue Reading
December 20, 2022
pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different vulnerability than CVE-2022-31814.Read More ...
Continue Reading
December 20, 2022
WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.Read More ...
Continue Reading
December 20, 2022
The Sidebar Widgets by CodeLights plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the âExtra CSS classâ parameter in versions up to, and including, 1.4 due to insuffici ...
Continue Reading
December 20, 2022
A Remote Code Execution (RCE) vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4.Read More ...
Continue Reading
December 20, 2022
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Prov ...
Continue Reading
December 20, 2022
An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD devices, memory card ...
Continue Reading
December 19, 2022
An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD devices, memory card ...
Continue Reading
December 19, 2022
Back to Main
