MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/introductions` endpoint and first_met_additional_info parameter.R ...
Continue Reading
May 08, 2023
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/relationships` endpoint and first_name and last_name parameter.Re ...
Continue Reading
May 08, 2023
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/work` endpoint and job and company parameter.Read More ...
Continue Reading
May 08, 2023
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Photos belonging to the Hidden Photos Album could be viewed without authent ...
Continue Reading
May 08, 2023
AsmBB v2.9.1 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the MiniMag.asm and bbcode.asm libraries.Read More ...
Continue Reading
May 08, 2023
AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal -Â Vulnerability allows path traversal and downloading files from the server, by an unspecified request.Read More ...
Continue Reading
May 08, 2023
OpenProject is open source project management software. Starting with version 7.4.0 and prior to version 12.5.4, when a user registers and confirms their first two-factor authentication (2FA) device f ...
Continue Reading
May 08, 2023
The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router solicitiations. Contiki-NG contains an implementation ...
Continue Reading
May 08, 2023
Back to Main
