Day: September 9, 2024

Description A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the

Description Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be

Description A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index

Description Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in DataFlowX Technology DataDiodeX allows Path Traversal.

Description Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic

Description A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE). References

Description The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS

Description FlyCASS CASS and KCM systems did not correctly filter SQL queries, which made them vulnerable to attack by outside

Description Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x , contain(s) an Improper Neutralization of Special Elements used

Description The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data due