Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request…

In Afian Filerun 20220202, lack of sanitization of the POST parameter “metadata[]” in `/?module=fileman&section=get&page=grid` leads to SQL injection. Zafiyet ile ilgili Genel Bilgi, Etki ve…

BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)…

Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application. Zafiyet ile ilgili Genel…

Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to information disclosure. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını Oku Kaynak:…

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none. Zafiyet ile ilgili Genel…

Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases. Credentials could be the…

Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to code execution. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını Oku Kaynak:…

In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with…

In WIFI Firmware, there is a possible system crash due to a missing count check. This could lead to remote denial of service with no…