CVE - API Security Blog

CVE-2022-44379

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_service.Read More ...

November 18, 2022

CVE-2022-45474

drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request.Read More ...

November 18, 2022

CVE-2022-45471

In JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular email addressRead More ...

November 18, 2022

CVE-2022-45369

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

November 18, 2022

CVE-2022-24037

Karmasis informatics solutions Infraskope Security Event Manager product has an unauthenticated access which could allow an unauthenticated attacker to obtain critical information.Read More ...

November 18, 2022

CVE-2022-24038

Karmasis informatics solutions Infraskope Security Event Manager product has an unauthenticated access which could allow an unauthenticated attacker to damage the page where the agents are listed.Read ...

November 18, 2022

CVE-2022-43308

INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies.Read More ...

November 17, 2022

CVE-2022-40200

Auth. (subscriber+) Arbitrary File Upload vulnerability in wpForo Forum plugin Read More ...

November 17, 2022