Aggregator

CVE-2018-19042 | Media File Manager Plugin 1.4.2 on WordPress wp-admin/admin-ajax.php dir_from/dir_to Parameter path traversal (EDB-45809)

Vuldb Updates
5 months 3 weeks ago
A vulnerability identified as critical has been detected in Media File Manager Plugin 1.4.2 on WordPress. This affects the function dir_from/dir_to of the file wp-admin/admin-ajax.php. This manipulation with the input ../ as part of Parameter causes path traversal. This vulnerability appears as CVE-2018-19042. The attack may be initiated remotely. In addition, an exploit is available.
vuldb.com

Qilin

Dark Feed IO
5 months 3 weeks ago

You must login to view this content

cohenido

Building a Smart Compliance Strategy in Cloud?

Security Boulevard
5 months 3 weeks ago

Is your Strategy for Cloud Compliance Intelligent Enough? One question prevails: is your compliance strategy smart enough to handle the complexities of the cloud environment? Understanding Non-Human Identities & Secret Management Before delving into strategies for compliance, let’s comprehend the dynamics of Non-Human Identities (NHIs) and secrets management. NHIs are machine identities vital for cybersecurity. […]

The post Building a Smart Compliance Strategy in Cloud? appeared first on Entro.

The post Building a Smart Compliance Strategy in Cloud? appeared first on Security Boulevard.

Alison Mack

CVE-2006-7048 | Claroline 1.7.5 atutor.inc.php rootSys file inclusion (EDB-1766 / SA20003)

Vuldb Updates
5 months 3 weeks ago
A vulnerability was found in Claroline 1.7.5. It has been declared as critical. Affected is an unknown function in the library inc/lib/event/init_event_manager.inc.php of the file atutor.inc.php. Executing manipulation of the argument rootSys can lead to file inclusion. This vulnerability appears as CVE-2006-7048. The attack may be performed from a remote location. In addition, an exploit is available.
vuldb.com

10 Best Endpoint Detection And Response (EDR) Companies in 2025

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
5 months 3 weeks ago

In 2025, the endpoint remains the primary battleground for cyber attackers, making the implementation of EDR solutions a critical necessity for robust cybersecurity defenses. Laptops, desktops, servers, mobile devices, and cloud workloads are critical entry points and data repositories, making them prime targets for sophisticated cyber threats. While traditional antivirus (AV) software offers a baseline […]

The post 10 Best Endpoint Detection And Response (EDR) Companies in 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CISO Advisory

CVE-2019-2910 | Oracle MySQL Server up to 5.6.45/5.7.27 Encryption information disclosure (Nessus ID 253212)

Vuldb Updates
5 months 3 weeks ago
A vulnerability described as problematic has been identified in Oracle MySQL Server up to 5.6.45/5.7.27. This issue affects some unknown processing of the component Encryption. Such manipulation leads to information disclosure. This vulnerability is listed as CVE-2019-2910. The attack may be performed from a remote location. There is no available exploit. Upgrading the affected component is recommended.
vuldb.com

CVE-2024-23645 | GLPI up to 10.0.11 Report Page cross site scripting (Nessus ID 253211)

Vuldb Updates
5 months 3 weeks ago
A vulnerability, which was classified as problematic, has been found in GLPI up to 10.0.11. The impacted element is an unknown function of the component Report Page. This manipulation causes basic cross site scripting. The identification of this vulnerability is CVE-2024-23645. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2018-7712 | OpenCV 3.4.1 loadsave.cpp validateInputImageSize code (Exploit 10998 / Nessus ID 253213)

Vuldb Updates
5 months 3 weeks ago
A vulnerability classified as problematic was found in OpenCV 3.4.1. This affects the function validateInputImageSize of the file modules/imgcodecs/src/loadsave.cpp. Executing manipulation can lead to code. This vulnerability is registered as CVE-2018-7712. It is possible to launch the attack remotely. No exploit is available. It is still unclear if this vulnerability genuinely exists.
vuldb.com

CVE-2021-40574 | GPAC 1.0.1 MP4Box load_text.c gf_text_get_utf8_line double free (Issue 1897 / Nessus ID 253214)

Vuldb Updates
5 months 3 weeks ago
A vulnerability labeled as problematic has been found in GPAC 1.0.1. Affected is the function gf_text_get_utf8_line of the file load_text.c of the component MP4Box. Executing manipulation can lead to double free. The identification of this vulnerability is CVE-2021-40574. The attack needs to be done within the local network. There is no exploit available. A patch should be applied to remediate this issue.
vuldb.com

CVE-2003-0132 | Apache HTTP Server up to 2.0.44 Linefeed memory allocation (VU#206537 / EDB-11)

Vuldb Updates
5 months 3 weeks ago
A vulnerability, which was classified as critical, was found in Apache HTTP Server up to 2.0.44. This affects an unknown function of the component Linefeed Handler. The manipulation results in uncontrolled memory allocation. This vulnerability is known as CVE-2003-0132. It is possible to launch the attack remotely. Furthermore, an exploit is available. You should upgrade the affected component.
vuldb.com

CVE-2023-20132 | Cisco Webex Meetings Web Interface cross site scripting (cisco-sa-wbx-sxss-fupl-64uHbcm5 / EUVD-2023-24311)

Vuldb Updates
5 months 3 weeks ago
A vulnerability labeled as problematic has been found in Cisco Webex Meetings. Impacted is an unknown function of the component Web Interface. Such manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2023-20132. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.
vuldb.com

CVE-2025-34158

CVE Trends
5 months 3 weeks ago
Currently trending CVE - Hype Score: 7 - Plex Media Server (PMS) versions 1.41.7.x through 1.42.0.x are affected by an unspecified security vulnerability reported via Plex’s bug bounty program. While technical details have not been publicly disclosed, the issue was acknowledged by the vendor and resolved in version ...

Managed ad