CVE-2018-14519
An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can craft a malicious CSRF page...
CVE-2018-14520
An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web...
[R1] Nessus Agent Version 8.3.4 Fixes Multiple Vulnerabilities
[R1] Nessus Agent Version 8.3.4 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 08/24/2022 - 12:18 Custom audit files bring tremendous power and flexibility when assessing the...
CVE-2020-35520
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was...
firefox-104.0-5.fc35
FEDORA-2022-ee0d54e824 Packages in this update: firefox-104.0-5.fc35 Update description: Firefox 104.0 release. For details, see https://www.mozilla.org/en-US/firefox/104.0/releasenotes/ Read More
firefox-104.0-5.fc36
FEDORA-2022-02d2625a01 Packages in this update: firefox-104.0-5.fc36 Update description: Firefox 104.0 release. For details, see https://www.mozilla.org/en-US/firefox/104.0/releasenotes/ Read More
firefox-104.0-5.fc37
FEDORA-2022-74ff7f9e74 Packages in this update: firefox-104.0-5.fc37 Update description: Firefox 104.0 release. For details, see https://www.mozilla.org/en-US/firefox/104.0/releasenotes/ Read More
pdns-recursor-4.6.3-1.fc36
FEDORA-2022-d1dcd9b046 Packages in this update: pdns-recursor-4.6.3-1.fc36 Update description: Security fix for CVE-2022-37428 Read More
firefox-stable-3620220823164227.1
FEDORA-FLATPAK-2022-d11152bd99 Packages in this update: firefox-stable-3620220823164227.1 Update description: Firefox 104.0 release. For details, see https://www.mozilla.org/en-US/firefox/104.0/releasenotes/ Read More
ZDI-22-1166: Delta Industrial Automation DIALink Hardcoded Cryptographic Key Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Delta Industrial Automation DIALink. Authentication is not required to exploit this vulnerability. Read...