Author: Cyberthreat Blog

Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations.

Opmantek NMIS before 8.5.12G has XSS via SNMP.

LibTIFF 4.0.7 has an “outside the range of representable values of type short” undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have...

LibTIFF 4.0.7 has an “outside the range of representable values of type float” undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have...