Forum
Forum-Navigation
Beitragsübersicht: Stefan Windus
Hallo,
das Github Repository des Fuzzers finden Sie unter:
https://github.com/RUB-NDS/medfuzz
…In: Fuzzingplattform auf GitHub?
vor 2 Jahren
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, l …In: CVE-2022-24869 - GLPI
vor 2 Jahren
An XSS issue was discovered on Kyocera d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application …In: CVE-2022-25344 - Kyocera d-COLOR MF3555 2XD_S000.002.271
vor 2 Jahren
Nextcloud Calendar is a calendar application for the nextcloud framework. SMTP Command Injection in …In: CVE-2022-24838 - Nextcloud Calendar
vor 2 Jahren
Discourse is an open source platform for community discussion. In stable versions prior to 2.8.3 and …In: CVE-2022-24804 - Discourse
vor 2 Jahren
In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An att …In: CVE-2022-27905 - ControlUp Real-Time Agent
vor 2 Jahren
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-li …In: CVE-2022-27239 - cifs-utils
vor 2 Jahren
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Pri …In: CVE-2022-24888 - Nextcloud Server
vor 2 Jahren
Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platf …In: CVE-2022-24887 - Nextcloud Talk
vor 2 Jahren
Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Prio …In: CVE-2022-24885 - Nextcloud Android app
vor 2 Jahren
IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 1 …In: CVE-2022-22312 - IBM Security Identity Manager
vor 2 Jahren
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, N …In: CVE-2022-24882 - FreeRDP
vor 2 Jahren
Discourse Assign is a plugin for assigning users to a topic in Discourse, an open-source messaging p …In: CVE-2022-24866 - Discourse Assign
vor 2 Jahren
The Menubar WordPress plugin before 5.8 does not sanitise and escape the command parameter before ou …In: CVE-2022-1152 - Menubar WordPress plugin
vor 2 Jahren
The Page Restriction WordPress (WP) WordPress plugin before 1.2.7 allows bad actors with administrat …In: CVE-2022-1027 - Page Restriction WordPress plugin
vor 2 Jahren
The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.96 does not sanitise …In: CVE-2022-0953 - Anti-Malware Security and Brute-Force Firewall WordPress plugin
vor 2 Jahren
The myCred WordPress plugin before 2.4.4 does not have any authorisation and CSRF checks in the mycr …In: CVE-2022-0363 - myCred WordPress
vor 2 Jahren
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInte …In: CVE-2022-1108 - LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1
vor 2 Jahren
A potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler in some ThinkPa …In: CVE-2022-1107 - IBM ThinkPad
vor 2 Jahren
A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 th …In: CVE-2022-0636 - Lenovo Thin Installer
vor 2 Jahren
A vulnerability was reported in Lenovo System Update that could allow a local user with interactive …In: CVE-2022-0354 - Lenovo System Update
vor 2 Jahren
Combodo iTop is a web based IT Service Management tool. In 3.0.0 beta releases prior to 3.0.0 beta3 …In: CVE-2022-24870 - Combodo iTop
vor 2 Jahren
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, l …In: CVE-2022-24868 - GLPI
vor 2 Jahren
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, l …In: CVE-2022-24867 - GLPI
vor 2 Jahren
Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. …In: CVE-2022-22558 - Dell PowerEdge Server BIOS
vor 2 Jahren
A vulnerability in the Cisco Discovery Protocol of Cisco Unified Communications Manager (Unified CM) …In: CVE-2022-20804 - Cisco Unified Communications Manager (Unified CM)
vor 2 Jahren
A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security …In: CVE-2022-20795 - Cisco Adaptive Security Appliance (ASA)
vor 2 Jahren
A vulnerability in the authentication component of Cisco Webex Meetings could allow an unauthenticat …In: CVE-2022-20778 - Cisco Webex Meetings
vor 2 Jahren
A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (V …In: CVE-2022-20773 - Cisco Umbrella Virtual Appliance
vor 2 Jahren
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archi …In: CVE-2022-27925 - Zimbra Collaboration (aka ZCS)
vor 2 Jahren
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary …In: CVE-2022-27924 - Zimbra Collaboration (aka ZCS)
vor 2 Jahren
An issue was discovered on Kyocera d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is a …In: CVE-2022-25343 - Kyocera d-COLOR MF3555 2XD_S000.002.271
vor 2 Jahren
An issue was discovered on Kyocera d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is a …In: CVE-2022-25342 - Kyocera d-COLOR MF3555 2XD_S000.002.271
vor 2 Jahren
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affect …In: CVE-2022-21498 - Oracle Database Server
vor 2 Jahren
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (co …In: CVE-2022-21496 - Oracle Java SE
vor 2 Jahren
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported ver …In: CVE-2022-21494 - Oracle Solaris
vor 2 Jahren
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su …In: CVE-2022-21491 - Oracle VM VirtualBox
vor 2 Jahren
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported …In: CVE-2022-21490 - MySQL Cluster
vor 2 Jahren
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (co …In: CVE-2022-21476 - Oracle Java SE
vor 2 Jahren
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middle …In: CVE-2022-21421 - Oracle Business Intelligence Enterprise Edition
vor 2 Jahren
Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Serv …In: CVE-2022-21410 - Oracle Database - Enterprise Edition Sharding component
vor 2 Jahren
Mattermost 6.4.x and earlier fails to properly invalidate pending email invitations when the action …In: CVE-2022-1385 - Mattermost 6.4.x and earlier
vor 2 Jahren
Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is ins …In: CVE-2022-1384 - Mattermost 6.4.x and earlier
vor 2 Jahren
The WordPress WP YouTube Live Plugin is vulnerable to Reflected Cross-Site Scripting via POST data f …In: CVE-2022-1187 - WordPress WP YouTube Live Plugin
vor 2 Jahren
The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parame …In: CVE-2022-1119 - Simple File List WordPress plugin
vor 2 Jahren
The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unau …In: CVE-2022-0993 - SiteGround Security plugin for WordPress
vor 2 Jahren
The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unau …In: CVE-2022-0992 - SiteGround Security plugin for WordPress
vor 2 Jahren
The Caldera Forms WordPress plugin before 1.9.7 does not validate and escape the cf-api parameter be …In: CVE-2022-0879 - Caldera Forms WordPress plugin
vor 2 Jahren