Intel Datacenter Group Event Code Issues and Vulnerabilities

Intel Datacenter Group Event is a data center group event consulting software from Intel Corporation USA. A security vulnerability exists in all versions of the Intel Datacenter Group Event Android application. An attacker exploited the vulnerability to escalate privileges...

aalborgstift.dk Cross Site Scripting vulnerability OBB-2841857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Emerson ControlWave data falsification vulnerability

Emerson ControlWave is a highly programmable controller from Emerson Electric U.S. that combines the unique capabilities of a Programmable Logic Controller PLC and a Remote Terminal Unit RTU into a hybrid controller. A data forgery vulnerability exists in all versions of Emerson ControlWave, whic...

WordPress Export All URLs plugin <= 4.3 - Authenticated Arbitrary System File Removal vulnerability

Authenticated Arbitrary System File Removal vulnerability discovered by Raad Haddad in WordPress Export All URLs plugin versions = 4.3. Solution Update the WordPress Export All URLs plugin to the latest available version at least 4.4...

UBUNTU-CVE-2020-1754

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...

CVE-2020-1754

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...

CVE-2020-1754: Improper Access Control

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...

CVE-2022-27535: Undefined Security Weakness

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker...

Kaspersky VPN Secure Connection security vulnerability

Kaspersky VPN Secure Connection is a Vpn client software from the Russian company Kaspersky. The software checks the security of the network. If the Wi-Fi network is not secure, Kaspersky VPN Secure Connection prompts you to enable a secure connection by connecting to a specially assigned server...

GHSA-32FW-9WQ8-9X9C node-latex-pdf is susceptible to command injection

A command injection vulnerability affects all versions of the package node-latex-pdf...

GHSA-CQFC-9452-R36J curljs Command Injection vulnerability

A command injection vulnerability affects all versions of the package curljs...

GHSA-5VRC-7JFR-4642 monorepo-build Command Injection vulnerability

A command injection vulnerability affects all versions of package monorepo-build...

CVE-2020-28423

This affects all versions of package monorepo-build...

Code injection

This affects all versions of package node-latex-pdf...

npm package node-latex-pdf command injection vulnerability

The npm package node-latex-pdf is a package for converting latex files to pdf format from the US company npm. A command injection vulnerability exists in all versions of node-latex-pdf, which stems from the presence of command injection...

Monorepo command injection vulnerabilities

monorepo is a movie homepage source repository from cinematic open source. A command injection vulnerability exists in all versions of monorepo-build, which stems from the presence of command injection...

npos-ocr command injection vulnerability

npos-ocr is an OCR tool for npos that uses the tesseract engine. A command injection vulnerability exists in all versions of npos-ocr, which stems from the presence of command injection...

npm heroku-env command injection vulnerability

npm heroku-env is a package from npm USA. It is used to parse DATABASEURL from heroku configurations and split it into PG environment variables used by psql pgdump pgrestore and nodepostgres. A command injection vulnerability exists in all versions of heroku-env, which stems from the presence of...

curljs command injection vulnerability

curljs is a Node.js library that wraps curl functionality. A command injection vulnerability exists in all versions of curljs, which stems from the presence of command injection...

npm package node-latex-pdf command injection vulnerability

The npm package node-latex-pdf is a package for converting latex files to pdf format from the US company npm. A command injection vulnerability exists in all versions of node-latex-pdf, which stems from the presence of command injection...