Results
28,815· Page 519/577opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of `go.opentelemetry.io
Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora i
When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once
A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In cas
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresse
An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by
An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the
The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any h
A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a p
IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through 10.0.1.7, and 2018.4.1.0 through 2018.4.1.20 is vulnerable t
Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to ac
Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to creat
IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a
HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management
Cross-site scripting (XSS) vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page
File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows unauthorized attackers to d
SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbi
IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin function
IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptogr
IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the H
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user wit
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user
An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local syste
Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6.
Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6.
Cross-Site Request Forgery (CSRF) vulnerability in SeoSamba for WordPress Webmasters plugin <= 1.0.5 versions.
B&R APROL versions < R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which
Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07
Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server
Lack of verification in B&R APROL Tbase server versions < R 4.2-07 may lead to memory leaks when receiving messages
Missing authentication when creating and managing the B&R APROL database in versions < R 4.2-07 allows reading and ch
The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back
Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.
Cross-site Scripting (XSS) - Generic in GitHub repository answerdev/answer prior to 1.0.4.
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.
Cross-site Scripting (XSS) - DOM in GitHub repository answerdev/answer prior to 1.0.4.
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitHub repository answerd
The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.
The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.
The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.
The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.
The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the a
The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the a
The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the a
The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the a
The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the a
The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.
The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the a
Test your stack for 2023issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.