1121 matches found
CVE-2022-34428
Dell Hybrid Client (pre-1.8) contains a Regular Expression Denial of Service vulnerability in the UI. An attacker with WMS group admin access could exploit the improper regex to cause a temporary DoS. A remediation is available: upgrade to version 1.8 or later. The affected component is the UI ha...
Dell Hybrid Client 路径遍历漏洞
Dell Hybrid Client is a software application from Dell USA Inc. It provides a client computing software with hybrid cloud management capabilities. A path traversal vulnerability exists in Dell Hybrid Client versions prior to 1.8. The vulnerability stems from a failure of a networked system or...
PT-2022-22162 · Dell · Dell Hybrid Client
Name of the Vulnerable Software and Affected Versions: Dell Hybrid Client versions prior to 1.8 Description: The issue is related to a Regular Expression Denial of Service in the UI. An adversary with WMS group admin access could potentially exploit this, leading to temporary denial-of-service...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Functional Tester
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 and IBM® Runtime Environment Java™ Version 1.8 used by Rational Functional Tester. Rational Functional Tester has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-21541 DESCRIPTION: An...
GHSA-GWC9-M7RH-J2WW vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, k3d, dynamic-localpv-provisioner, kubeflow, terraform-provider-sendgrid, kubeflow-fips...
GHSA-69CG-P879-7622 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, grpcurl, dynamic-localpv-provisioner-fips, kube-state-metrics, k3d, dynamic-localpv-provisioner, kubeflow, wireguard-go, terraform-provider-sendgrid, hey, kubeflow-fips, kubeflow-katib...
CVE-2022-27664 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, grpcurl, dynamic-localpv-provisioner-fips, kube-state-metrics, k3d, dynamic-localpv-provisioner, kubeflow, wireguard-go, terraform-provider-sendgrid, hey, kubeflow-fips, kubeflow-katib...
CVE-2021-43565 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, k3d, dynamic-localpv-provisioner, kubeflow, terraform-provider-sendgrid, kubeflow-fips...
WordPress plugin WP Hide & Security Enhancer 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress plugin Awin Data Feed 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plug-in. A cross-site scripting vulnerability exists in versions of the WordPress Awin Data Feed plugin prior...
PT-2022-14202 · WordPress · Awin Data Feed
Name of the Vulnerable Software and Affected Versions: Awin Data Feed WordPress plugin versions prior to 1.8 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted via an AJAX action...
WordPress plugin Awin Data Feed 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
GHSA-P782-XGP4-8HR8 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, grpcurl, dynamic-localpv-provisioner-fips, kind, k3d, ctop, dynamic-localpv-provisioner, kubeflow, terraform-provider-sendgrid...
Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21434, CVE-2022-21443, CVE-2022-21476, CVE-2022-21426, CVE-2022-21496
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u332-b09. That fixes following CVEs: - CVE-2022-21476: Defective secure validation in Apache Santuario - CVE-2022-21496: URI parsing inconsistencies - CVE-2022-21434: Improper object-to-string conversion in AnnotationInvocationHandler -...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Service Tester
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 and IBM® Runtime Environment Java™ Version 1.8 used by Rational Service Tester. Rational Service Tester has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2021-35578 DESCRIPTION: An...
GHSA-FP37-C92Q-4PWQ Kubernetes kube-apiserver unauthorized access
The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the namespace, meaning that a user with...
CVE-2022-1825
Cross-site Scripting XSS - Reflected in GitHub repository collectiveaccess/providence prior to 1.8...
Providence 跨站脚本漏洞
Providence is the "back-end" component of CollectiveAccess, a set of web-based applications from the CollectiveAccess community in the United States. A security vulnerability exists in Providence versions prior to 1.8, which stems from a cross-site scripting vulnerability...