Results
25,043· Page 217/501In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.
In zulip before 1.3.12, bot API keys were accessible to other users in the same realm.
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vulnerabilities, inclu
Saia Burgess Controls (SBC) PCD through 2022-05-06 uses a Broken or Risky Cryptographic Algorithm. According to FSCT-202
Saia Burgess Controls (SBC) PCD through 2022-05-06 allows Authentication bypass. According to FSCT-2022-0062, there is a
Honeywell Experion PKS Safety Manager 5.02 has Insufficient Verification of Data Authenticity. According to FSCT-2022-00
Honeywell Experion PKS Safety Manager (SM and FSC) through 2022-05-06 has Insufficient Verification of Data Authenticity
Honeywell Experion PKS Safety Manager 5.02 uses Hard-coded Credentials. According to FSCT-2022-0052, there is a Honeywel
Honeywell Experion PKS Safety Manager through 2022-05-06 has Missing Authentication for a Critical Function. According t
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in GS Plugins GS Testimonial
The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node
An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of in
When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero C
An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWin
Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file.
The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TB
Ovarro TBox TWinSoft uses the custom hardcoded user “TWinSoft” with a hardcoded key.
An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system.
An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks.
In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $file_link in class/KippoInput.cla
In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xss_clean() in class/KippoInput.cl
Unauthenticated redirection to a malicious website
In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was misse
In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible
Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via `httpclient_impl` con
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno
Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before 1
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in webapi component i
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in task managem
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media
In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synolog
Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to engag
Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially e
Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attack
Use after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap cor
Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to instal
Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who co
Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corr
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit
Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9
Test your stack for 2022issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.