An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular…

The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code. Zafiyet…

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information…

The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the…

xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘bdate’ of the resource xhisvalue.htm, which may allow an unauthorized attacker…

xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisalarm.htm, which may allow an unauthorized attacker…

xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için…

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with…

A logged-in and authenticated user with a Reviewer Role may lock a content item. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını Oku…

An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages…