Archive
16 August 2023
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Low 3.7
MaximaTech Portal Executivo Cookie missing encryption
A vulnerability has been found in MaximaTech Portal Executivo 21.9.1.140 and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to missing encryption of sensitive data. The attack can be …
-
Low 3.5CVE-2023-4382 Public exploit
tdevs Hyip Rio Profile Settings settings cross site scripting
A vulnerability, which was classified as problematic, has been found in tdevs Hyip Rio 2.1. Affected by this issue is some unknown functionality of the file /user/settings of the component Profile Settings. The manipulation of the argument avatar leads to cro…
-
Low 3.7
Jenkins Tuleap Authentication Plugin non-constant time token comparison
Jenkins Tuleap Authentication Plugin 1.1.20 and earlier uses a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.