:: Deepquest ::

STVS ProVision version 5.9.10 suffers from an authenticated reflective cross site scripting vulnerability.

STVS ProVision version 5.9.10 suffers from a cross site request forgery vulnerability.

Qualys has released extensive research details regarding a heap-based buffer overflow vulnerability in sudo. The issue was introduced in July 2011 (commit 8255ed69), and affects all legacy versions from 1.8.2 to 1.8.31p2 and all stable versions from 1.9.0 to 1.9.5p1, in their default configuration.

jQuery UI 1.12.1 – Denial of Service (DoS)

CMSUno 1.6.2 – ‘lang/user’ Remote Code Execution (Authenticated)

EgavilanMedia PHPCRUD 1.0 – ‘Full Name’ Stored Cross Site Scripting

Apple Security Advisory 2021-01-26-1 – iOS 14.4 and iPadOS 14.4 address race condition and arbitrary code execution vulnerabilities.

Apple Security Advisory 2021-01-26-2 – tvOS 14.4 addresses a race condition vulnerability.

Apple Security Advisory 2021-01-26-3 – watchOS 7.3 addresses a race condition vulnerability.