806 matches found
CVE-2022-30073
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS via /admin/users/save.php...
GHSA-X8Q8-4HP5-463W Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch
Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors...
WBCE CMS 跨站脚本漏洞
WBCE CMS is an open source content management system CMS based on PHP and MySQL. version 1.5.2 of WBCE CMS contains a cross-site scripting vulnerability that can be exploited by attackers to conduct cross-site scripting XSS attacks via /admin/users/save.php...
DEBIAN-CVE-2021-34085
Read access violation in the IIIdequantizesample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact, a different vulnerability than CVE-2017-9872. CVE-2017-14409, and...
OESA-2022-1638 nodejs-grunt security update
Grunt is the JavaScript task runner. Why use a task runner? In one word: automation. The less work you have to do when performing repetitive tasks like minification, compilation, unit testing, linting, etc, the easier your job becomes. After you've configured it, a task runner can do most of that...
MP3Gain 缓冲区错误漏洞
MP3Gain is an audio volume control application. A security vulnerability exists in MP3Gain version 1.5.2-r2 and prior versions, which stems from a read access conflict issue in the IIIdequantizesample function in mpglibDBL/layer3.c. The vulnerability can be exploited to cause a denial of service...
The Open Motion Planning Library安全漏洞
The Open Motion Planning Library OMPL is a collection of sampling-based motion planning algorithms. A security vulnerability exists in version v1.5.2 of The Open Motion Planning Library, which stems from a memory leak contained in VFRRT.cpp...
CVE-2022-28477
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...
CVE-2022-28477
CVE-2022-28477 affects WBCE CMS 1.5.2 and is described as a Cross Site Scripting (XSS) vulnerability. The connected sources indicate that an attacker could execute malicious code, tamper with pages to perform phishing, and trick users into revealing credentials; however, explicit root-cause detai...
WordPress plugin English WordPress Admin 输入验证错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress English WordPress Admin plugin version 1.5.2 has a redirect vulnerability, which can be...
CVE-2022-0436
Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...
CVE-2022-0436
Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...
AZL-45141 CVE-2022-0436 affecting package js-jquery 3.5.0-4
Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...
DEBIAN-CVE-2022-0436
Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...
CVE-2022-0436
Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...
UBUNTU-CVE-2022-0436
Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...
PT-2022-13183 · Grunt +3 · Grunt +3
Name of the Vulnerable Software and Affected Versions: Grunt versions prior to 1.5.2 Description: The issue is related to path traversal in the Grunt GitHub repository. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents...
Grunt 路径遍历漏洞
Grunt is a JavaScript task runner. A path traversal vulnerability existed in Grunt before 1.5.2. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...
CVE-2022-0436
Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...
CVE-2021-36896 WordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in Pricing Table WordPress plugin versions = 1.5.2...