Privilege issues in Kubernetes kube-apiserver
Overview : Privilege issues in Kubernetes kube-apiserver Affected Product(s) : kube-apiserver v1.18.0-1.18.5 kube-apiserver v1.17.0-1.17.8 kube-apiserver v1.16.0-1.16.12 all kube-apiserver versions prior
Security Advisory for Post-Authentication Stack Overflow on Some Routers and Modem Routers
Overview : Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before
Security Advisory for Post-Authentication Command Injection on Some Routers and Gateways, PSV-2018-0352
Overview : Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6220 before 1.0.0.52, D6400
The Argo Project is an open source provider of Kubernetes CI/CD workflows, facilitating Infrastructure as Code.
[vc_row][vc_column][vc_column_text] Overview : In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls
cPanel before 82.0.18 Account bypass vulnerability
Overview : cPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account suspensions (SEC-508). Affected
Multiple issues was discovered in Backdrop CMS
Overview : Multiple issues was discovered in Backdrop CMS Affected Product(s) : Backdrop Core 1.14.x versions prior to 1.14.2 Backdrop
Accentis Content Resource Management System suffer from a remote SQL injection vulnerability.
Overview : Accentis Content Resource Management System versions released prior to the October 2015 patch suffer from a remote SQL
Accentis Content Resource Management System suffer from a cross site scripting vulnerability.
Overview : Accentis Content Resource Management System versions released prior to the October 2015 patch suffer from a cross site
Multiple issues in Cloud Foundry Products
Overview : UAA logs all query parameters with debug logging level Affected Product(s) : CF Deployment All versions prior to
SQL Injection flaw in SuiteCRM
Overview : SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection. Affected Product(s) :
Moxa EDR 810 Series vulnerabilities
Overview : Moxa EDR 810 Series Improper Input Validation and Improper Access Control vulnerabilities Affected Product(s) : EDR-810: All versions
Jenkins announces vulnerabilities
Overview : Stored XSS vulnerability in expandable textbox form control SECURITY-1498 / CVE-2019-10401 Jenkins form controls include an expandable textbox
Cloud Foundry NFS vulnerable to LDAP injection
Overview : Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable
Buffer Overflow vulnerability in Advantech WebAccess
Overview : In WebAccess versions 8.4.1 and prior, multiple stack based buffer overflow vulnerabilities are detected by a lack of