It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../". For example, Root.Open("../") would ...
YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the con...
IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to ins...
IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside o...
IBM Jazz Reporting Service could allow an authenticated user on the host network to cause a denial of service using specially crafted SQL query tha...
A security vulnerability has been detected in WeKan up to 8.20. This affects the function setBoardOrgs of the file models/boards.js of the componen...
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages. Note: Software vers...
A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access to sensitive information. ...
Unrestricted Upload of File with Dangerous Type vulnerability in Hillstone Networks Operation and Maintenance Security Gateway on Linux allows Uplo...
A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annotation may not be effective in the pre...
AI-powered asset discovery, dark web monitoring, CVE alerting, and vulnerability scanning — all in one platform.