Archive
8 February 2024
Vulnerabilities first published on this day (UTC), newest first.
88 results · Feed
-
Medium 6.7
Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15 and later, Wit…
-
High 7.5
The Binance Trust Wallet app for iOS in commit 3cd6e8f647fbba8b5d8844fcd144365a086b629f, git tag 0.0.4 misuses the trez…
-
High 7.5
The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticate…
-
Critical 9.8
libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authen…
-
Critical 9.8
l8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass authen…
-
Critical 9.8
php-jwt 1.0.0 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authen…
-
High 7.0
Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate priv…
-
Critical 9.8
An OS command injection vulnerability exists in Akaunting v3.1.3 and earlier. An attacker can manipulate the company lo…