CVE-2024-44912

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem cryptotm.c...

CVE-2021-44912

CVE-2021-44912 affects XE 1.116: uploading via the Normal button has no suffix restriction, allowing any file to be placed in the files directory. With .htaccess restricting only PHP types, HTML files can enable stored XSS, and if .htaccess is misconfigured (pre‑XE 1.11.2), PHP files may be uploa...