An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges and de ...
Continue Reading
December 12, 2022
Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is legitimately pointing to Jenkins.Read More ...
Continue Reading
December 12, 2022
Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom Build Properties and Build Summary pages, resulting in a sto ...
Continue Reading
December 12, 2022
A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows attackers to have Jenkins connect to Gerrit servers (previously configured by Jenk ...
Continue Reading
December 12, 2022
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Textile-formatted fields.Read More ...
Continue Reading
December 11, 2022
The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication.R ...
Continue Reading
December 11, 2022
SENS v1.0 is vulnerable to Cross Site Scripting (XSS).Read More ...
Continue Reading
December 11, 2022
SENS v1.0 has a file upload vulnerability.Read More ...
Continue Reading
December 11, 2022
Back to Main
