Recent vulnerabilities and exploits

An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to...

U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable (sBuffer) leads to a Write-What-Where outcome. Writing beyond sBuffer will clobber most global variables until reaching a pointer such as...

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option....

APPLE-SA-2020-09-24-1 macOS Catalina 10.15.6 Supplemental Update, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave...

APPLE-SA-2020-09-24-1 macOS Catalina 10.15.6 Supplemental Update, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave...

The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a crafted request, leading to Remote Code Execution....

Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting (XSS) ....

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification (SEC-557)....

In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554)....

cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558)....

1 2 3 4 5 NEXT »