1274 matches found
CVE-2022-30322
go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter processed malicious HTTP responses. Fixed in 1.6.1 and 2.1.0...
UBUNTU-CVE-2022-30322
go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter processed malicious HTTP responses. Fixed in 1.6.1 and 2.1.0...
UBUNTU-CVE-2022-30323
go-getter up to 1.5.11 and 2.0.2 panicked when processing password-protected ZIP files. Fixed in 1.6.1 and 2.1.0...
CVE-2022-30321
go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws. Fixed in 1.6.1 and 2.1.0...
GHSA-65X8-9VGM-5FG5 Feehi CMS arbitrary file upload vulnerability
Feehi CMS 2.1.0-beta is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...
Feehi CMS arbitrary file upload vulnerability
Feehi CMS 2.1.0-beta is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...
CVE-2022-1795
Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV...
com.day.cq:cq-personalization (>=5.4.0 <=5.6.8), org.apache.sling:org.apache.sling.servlets.post (>=2.1.0 <=3.0.2) potentially affected by CVE-2012-3353 via org.apache.sling:org.apache.sling.jcr.contentloader (>=2.0.4-incubator <=2.1.4)
org.apache.sling:org.apache.sling.jcr.contentloader MAVEN version =2.0.4-incubator, =5.4.0, =2.1.0, =3.0.2 Source cves: CVE-2012-3353 Source advisory: OSV:GHSA-WJP3-4XCQ-598P...
Moderate: Red Hat Security Advisory: Cryostat 2.1.0: new Cryostat on RHEL 8 container images
New Cryostat 2.1.0 on RHEL 8 container images are now available New Cryostat 2.1.0 on RHEL 8 container images have been released, adding a variety of features and bug fixes and addressing the following security vulnerability: CVE-2021-3121 see References Users of Cryostat 2.0.0 on RHEL 8 containe...
PT-2022-6211 · Dell · Dell Powerstore
Name of the Vulnerable Software and Affected Versions: Dell PowerStore versions 2.1.0.x Description: The issue is related to a configuration vulnerability in the PowerStore T OS storage system's firmware, associated with weaknesses in the authentication procedure. This could allow a remote attack...
DEBIAN-CVE-2022-1222
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...
Design/Logic Flaw
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-1222
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-1222
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-1172
Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV...
DEBIAN-CVE-2022-1172
Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV...
PT-2022-16309 · Unknown · Zzzcms Zzzphp
Name of the Vulnerable Software and Affected Versions: ZZZCMS zzzphp version 2.1.0 Description: A remote command execution issue was discovered in ZZZCMS zzzphp, allowing for potential exploitation via the danger key function at zzz template.php. Recommendations: For ZZZCMS zzzphp version 2.1.0,...
CVE-2022-1035
Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV...
