This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue Reading
November 18, 2022
Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Soledad premium theme Read More ...
Continue Reading
November 18, 2022
In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 template. The REST API endpoint for validating device configura ...
Continue Reading
November 18, 2022
An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX ...
Continue Reading
November 18, 2022
The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability (XSS), because user input is not correctly encoded in HTML attributes when returned by the server.SEPPmail 11.1.10 allows XS ...
Continue Reading
November 18, 2022
cgi.rb in Ruby through 2.6.x, through 3.0x, and through 3.1.x allows HTTP header injection. If a CGI application using the CGI library inserts untrusted input into the HTTP response header, an attacke ...
Continue Reading
November 18, 2022
InstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the installer binary parent directory when displaying popups. This may allow an attacker to plant a malicious D ...
Continue Reading
November 18, 2022
Carel Boss Mini 1.5.0 has Improper Access Control.Read More ...
Continue Reading
November 18, 2022
Back to Main
