Security Information and News
Security
microsoft — windows_10 Microsoft is investigating reports of a series of remote code execution vulnerabilities impacting Windows and Office products. Microsoft is aware of targeted attacks that attempt to exploit…
duxcms — duxcms File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload. 2023-07-06 not yet calculated CVE-2020-21861MISC duxcms — duxcms Directory traversal vulnerability in…
jetbrains — teamcity JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML…
nanopb — nanopb Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string. 2023-06-17 not yet calculated CVE-2014-125106MISCMISCMISC mozilla — firefox A compromised child process could have injected XBL Bindings…
nanopb — nanopb Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string. 2023-06-17 not yet calculated CVE-2014-125106MISCMISCMISC wordpress — wordpress A vulnerability classified as problematic was found in cchetanonline…
wordpress — wordpress A vulnerability classified as problematic was found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this vulnerability is the function exitboxadmin of the…
stars_alliance — psychostats A vulnerability classified as problematic has been found in Stars Alliance PsychoStats up to 3.2.2a. This affects an unknown part of the file upload/admin/login.php. The manipulation of…
ruby-saml — ruby-saml xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used. 2023-05-27 not yet calculated CVE-2015-20108MISCMISCMISCMISC webplus_pro…
umbraco — cms Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:script in an xsltSelection to developer/Xslt/xsltVisualize.aspx. 2023-05-18 not yet calculated CVE-2019-25137MISCMISCMISCMISC google…
loadbalancer — enterprise_va_max The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write…