Güncel Güvenlik Açıkları

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ReadXPM_W+0x0000000000000531. Devamını Oku

Cross-site scripting (XSS) vulnerability in /application/controller/admin/theme.php in LimeSurvey 3.6.2+180406 allows remote attackers to inject arbitrary web script or HTML via the changes_cp parameter to the index.php/admin/themes/sa/templatesavechanges URI. Devamını Oku

Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php. Devamını Oku

A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Facebook Hermes prior to v0.10.0. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected. Devamını Oku

Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php. Devamını Oku

The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent is subject to a man-in-the-middle attack due to improper certificate validation. IBM X-Force ID: 182046. Devamını Oku

The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent is subject to a man-in-the-middle attack due to improper certificate validation. IBM X-Force ID: 182046. Devamını Oku

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data. Devamını Oku

CPAN 2.28 allows Signature Verification Bypass. Devamını Oku

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data. Devamını Oku

CPAN 2.28 allows Signature Verification Bypass. Devamını Oku

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass. Devamını Oku