Category: Advisories

EidoGo is susceptible to Cross-Site Scripting (XSS) attacks via maliciously crafted SGF input. Read More

custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution. Read More

FEDORA-2022-1124e5882d Packages in this update: gnupg2-2.3.4-2.fc35 Update description: Fix for CVE-2022-34903 (#2103242) Read More

USN-5488-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Chancen and Daniel Fiala discovered that OpenSSL...

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause...

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords. Read More

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user's company. Read More

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members' account numbers. Read More

A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction. Read More

FEDORA-2022-c4ec706488 Packages in this update: xen-4.16.1-5.fc36 Update description: Linux disk/nic frontends data leaks [XSA-403, CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-3374] Read More