Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an attacker to pass unsafe commands to the environment. This issue affects ...
Continue ReadingSeptember 05, 2022
Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.Read More ...
Continue ReadingSeptember 05, 2022
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.Read More ...
Continue ReadingSeptember 05, 2022
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the pars ...
Continue ReadingSeptember 05, 2022
Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses t ...
Continue ReadingSeptember 05, 2022
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the pars ...
Continue ReadingSeptember 05, 2022
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the pars ...
Continue ReadingSeptember 05, 2022
Cross-site Scripting (XSS) - Reflected in GitHub repository splitbrain/dokuwiki prior to 2022-07-31a.Read More ...
Continue ReadingSeptember 05, 2022
Back to Main