Riasztások

A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. This affects an unknown part of the file /menu_nat.asp of the component HTTP Request Handler. The...

A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/search.php. The...

Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users.

Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users.

Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

StudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF).

agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain an XML External Entity (XXE) via the RSSReader endpoint. This vulnerability allows attackers to access sensitive...