Critical: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.0.2 security and bug fixes

Multicluster Engine for Kubernetes 2.0.2 General Availability release images, which fix bugs and update container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2022-2820

Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2...

NamelessMC 授权问题漏洞

NamelessMC is a free, easy to use and powerful website software from the NamelessMC team. Suitable for your Minecraft server, it contains tons of features. NamelessMC versions prior to v2.0.2 have an authorization issue vulnerability that stems from improper access control...

NamelessMC 安全漏洞

NamelessMC is a free, easy to use and powerful website software from the NamelessMC team. Suitable for your Minecraft server, it contains tons of features. A security vulnerability exists in versions of NamelessMC prior to v2.0.2 that stems from a missing critical step in authentication...

ts-deepmerge before 2.0.2 vulnerable to Prototype Pollution

The package ts-deepmerge before version 2.0.2 is vulnerable to Prototype Pollution due to missing sanitization of the merge function...

deepmerge-ts 安全漏洞

deepmerge-ts is an npm package. It is used to deep merge 2 or more objects with respect to type information. A security vulnerability exists in versions of deepmerge-ts prior to 2.0.2, which stems from the lack of handling of merge functions and is susceptible to prototype contamination...

PT-2022-4355

Name of the Vulnerable Software and Affected Versions Open AMT Cloud Toolkit versions prior to 2.0.2 Open AMT Cloud Toolkit versions prior to 2.2.2 Description The issue is related to an authentication bypass in the Open AMT Cloud Toolkit software. This could potentially allow an unauthenticated...

CVE-2022-34955

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddatafortopusers.php...

Pligg CMS SQL注入漏洞

Pligg CMS is a content management system by Berteh Personal Developers. A security vulnerability exists in Pligg CMS version v2.0.2, which stems from a security issue with the pagesize parameter in loaddatafortopusers.php...

PT-2022-22455 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A time-based SQL injection issue was found in Pligg CMS. The issue is related to the page size parameter at the "load data for groups.php" endpoint. Recommendations: For Pligg CMS version 2.0.2, avoid usin...

PT-2022-8899 · Unknown · Image-Tiler

Name of the Vulnerable Software and Affected Versions: image-tiler versions prior to 2.0.2 Description: A command injection issue affects the package. Recommendations: For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue...

GHSA-FW3V-X4F2-V673 Mistune vulnerable to catastrophic backtracking

In Mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking...

CVE-2022-34749

In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking...

CVE-2022-34749

In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking...

PT-2022-22315 · Mistune +1 · Mistune +1

Name of the Vulnerable Software and Affected Versions: Mistune versions 2.0.2 and earlier Description: The issue arises from the support of inline markup in Mistune, which utilizes regular expressions. These regular expressions can lead to a high amount of backtracking on certain edge cases, a...

CVE-2022-34749

In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named catastrophic backtracking...

CVE-2022-34749

CVE-2022-34749 affects Mistune

mistune 安全漏洞

mistune is a fast and powerful Python Markdown parser from the individual developer Hsiaoming Yang. A security vulnerability exists in mistune 2.0.2 and earlier versions, which stems from the fact that its support for inline markup is implemented through the use of regular expressions, which may...

WordPress plugin Accordions 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2022-21736 · Biplob Adhikari · Accordion

Name of the Vulnerable Software and Affected Versions: Biplob Adhikari's Accordions plugin versions = 2.0.2 Description: The issue concerns an Unauthenticated WordPress Options Change vulnerability. This allows unauthorized changes to WordPress options. Recommendations: For Biplob Adhikari's...