Category: Advisories

A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat CloudForms 5.x. Read More

EidoGo is susceptible to Cross-Site Scripting (XSS) attacks via maliciously crafted SGF input. Read More

custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution. Read More

FEDORA-2022-1124e5882d Packages in this update: gnupg2-2.3.4-2.fc35 Update description: Fix for CVE-2022-34903 (#2103242) Read More

USN-5488-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Chancen and Daniel Fiala discovered that OpenSSL...

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause...

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords. Read More

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user's company. Read More

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members' account numbers. Read More

A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction. Read More