CVE-2022-38075

Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Mantenimiento web plugin Read More ...

Continue Reading
CVE-2022-43673

Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for a limited period of time) from the AppDataRoamingWireIndexedDBhttps_app.wire.com ...

Continue Reading
CVE-2022-42461

Broken Access Control vulnerability in miniOrange's Google Authenticator plugin Read More ...

Continue Reading
CVE-2022-43482

Missing Authorization vulnerability in Appointment Booking Calendar plugin Read More ...

Continue Reading
CVE-2022-40746

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
CVE-2022-3922

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
CVE-2022-44378

Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=delete_mechanic.Read More ...

Continue Reading
CVE-2022-45473

In drachtio-server 0.8.18, /var/log/drachtio has mode 0777 and drachtio.log has mode 0666.Read More ...

Continue Reading

Back to Main

Subscribe for the latest news: