Güncel Güvenlik Açıkları

Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled. Devamını Oku Kaynak: NIST

An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a user, with the level Operator, to access stored SSL certificates and associated key pairs during export. Devamını Oku Kaynak: NIST

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory. Devamını Oku Kaynak: NIST

Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1. Devamını Oku Kaynak: NIST

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 213076. Devamını Oku Kaynak: NIST

Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, 8.2.2 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests. Devamını Oku Kaynak: NIST

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 220394. Devamını Oku Kaynak: NIST

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /student_attendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Devamını Oku Kaynak: NIST

The Dynamic Data Mapping module in Liferay Portal through v7.3.6 and Liferay DXP through v7.3 incorrectly sets default permissions for site members, allowing authenticated attackers to add and duplicate forms via the UI or the API. Devamını Oku Kaynak: NIST