API - CVE CyberSecurity Database News (Page 237)

Nov 28, 2023 API Node.js

CVE-2023-30588 - Node.js X509Certificate DoS Vulnerability Explained – How Bad Public Keys Crash Your Server

A recent vulnerability, CVE-2023-30588, was discovered in the Node.js runtime, affecting all currently supported versions: v16, v18, and v20. This issue lies

Nov 24, 2023 API Exploit Red Hat Red Hat Enterprise Linux 6

CVE-2023-6277 - Out-of-Memory Flaw in libtiff Could Crash Your Applications

If your project handles image files, you’ve probably heard of libtiff. It’s the go-to library for reading and writing TIFF image files

Nov 23, 2023 WordPress API Omnisend Email Marketing for WooCommerce by Omnisend

CVE-2023-47244 - Breaking Down the Omnisend Email Marketing for WooCommerce Vulnerability

--- Introduction On November 14, 2023, CVE-2023-47244 was assigned to a serious security flaw in the “Email Marketing for WooCommerce by Omnisend” WordPress plugin.

Nov 21, 2023 Microsoft API PHP Owncloud

CVE-2023-49103 - Revealing Sensitive Information in ownCloud Through graphapi's GetPhpInfo.php

Summary: A serious information disclosure vulnerability, CVE-2023-49103, was discovered in ownCloud's graphapi app versions .2.x (before .2.1) and .3.

Nov 21, 2023 API Exploit Google nextcloud security-advisories

CVE-2023-48239 - How a Malicious User Could Break Nextcloud’s External Storage for Everyone

Nextcloud Server is a popular self-hosted, open-source cloud solution, used around the world for storing data, sharing files, and syncing documents with teams.