Use After Free in GitHub repository vim/vim prior to 9.0.0579.Read More ...
Continue Reading
September 25, 2022
The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery.Read More ...
Continue Reading
September 24, 2022
Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplates getForEntity to retrieve the conten ...
Continue Reading
September 24, 2022
Nepxion Discovery is a solution for Spring Cloud. Discover is vulnerable to SpEL Injection in discovery-commons. DiscoveryExpressionResolvers eval method is evaluating expression with a StandardEval ...
Continue Reading
September 24, 2022
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciousl ...
Continue Reading
September 23, 2022
MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading to Remote Code Execution. This issue is patched in version 1.0.4. There is no k ...
Continue Reading
September 23, 2022
Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has ...
Continue Reading
September 23, 2022
A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Proces ...
Continue Reading
September 23, 2022
Back to Main
