CVE - API Security Blog

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.Read More ...

August 19, 2022

CVE-2022-36605

Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.Read More ...

August 19, 2022

CVE-2022-2886

A vulnerability, which was classified as critical, was found in Laravel 5.1. Affected is an unknown function. The manipulation leads to deserialization. It is possible to launch the attack remotely. T ...

August 19, 2022

CVE-2022-35909

In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.Read More ...

August 19, 2022

CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0224.Read More ...

August 19, 2022

CVE-2022-35910

In Jellyfin before 10.8, stored XSS allows theft of an admin access token.Read More ...

August 19, 2022

CVE-2022-1021

Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0.Read More ...

August 19, 2022

CVE-2022-36220

Kiosk breakout (without quit password) in Safe Exam Browser (Windows) Read More ...

August 19, 2022