Dragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contain a Cross-Site Request Forgery in the logout page.Read More ...
Continue ReadingDecember 11, 2022
SENS v1.0 is vulnerable to Cross Site Scripting (XSS) via com.liuyanzhao.sens.web.controller.admin, getRegister.Read More ...
Continue ReadingDecember 11, 2022
SENS v1.0 is vulnerable to Incorrect Access Control vulnerability.Read More ...
Continue ReadingDecember 11, 2022
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields. Depending on the configuration, this may ...
Continue ReadingDecember 11, 2022
Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when the MITM ...
Continue ReadingDecember 11, 2022
Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when at least one device ...
Continue ReadingDecember 11, 2022
Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Network in SAP BusinessObjects Business Intelligence Platform (Monitoring DB) - versio ...
Continue ReadingDecember 11, 2022
Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13.Read More ...
Continue ReadingDecember 11, 2022
Back to Main