Cross Site Scripting (XSS) vulnerability in TomExam 3.0 via p_name parameter to list.thtml.Read More ...
Continue Reading
December 05, 2022
All Craft CMS versions between 3.0.0 and 3.7.32 disclose password hashes of users who authenticate using their E-Mail address or username in Anti-CSRF-Tokens. Craft CMS uses a cookie called CRAFT_CSRF ...
Continue Reading
December 05, 2022
A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk (denial of service) by performing ac ...
Continue Reading
December 05, 2022
When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same hand ...
Continue Reading
December 05, 2022
AMI MegaRAC User Enumeration VulnerabilityRead More ...
Continue Reading
December 05, 2022
AMI MegaRAC Redfish Arbitrary Code ExecutionRead More ...
Continue Reading
December 05, 2022
MegaRAC Default Credentials VulnerabilityRead More ...
Continue Reading
December 05, 2022
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IP ...
Continue Reading
December 05, 2022
Back to Main
