CVE-2022-46147 Drag and Drop XBlock v2 has XSS Issues in Xblock Input Fields

Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target image. Versions prior to 3.0.0 are vulnerable to cross-site scripting in multiple XBlock Fields. Any platform that has deployed the XBlock may be impacted. Version 3.0.0 contai...

PT-2022-26153 · Grails · Grails Spring Security Core Plugin

Name of the Vulnerable Software and Affected Versions: Grails Spring Security Core plugin versions 1.x Grails Spring Security Core plugin versions 2.x Grails Spring Security Core plugin versions 3.0.0 through 3.3.1 Grails Spring Security Core plugin versions 4.0.0 through 4.0.4 Grails Spring...

CVE-2022-26508

Improper authentication in the IntelR SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information disclosure via network access...

Intel SDP Tool 授权问题漏洞

Intel SDP Tool is a server debugging and configuration tool from Intel Corporation USA. A security vulnerability exists in Intel SDP Tool versions prior to 3.0.0, which stems from incorrect authentication and could allow unauthenticated users to potentially achieve information disclosure by...

PT-2022-17909 · Intel · Intel Sdp Tool

Name of the Vulnerable Software and Affected Versions: IntelR SDP Tool versions prior to 3.0.0 Description: The issue is related to improper authentication, which may allow an unauthenticated user to potentially enable information disclosure via network access. Recommendations: For versions prior...

CVE-2021-39432

diplib v3.0.0 is vulnerable to Double Free...

PYSEC-2022-43131

diplib v3.0.0 is vulnerable to Double Free...

PT-2022-10916 · Diplib · Diplib

Name of the Vulnerable Software and Affected Versions: diplib version 3.0.0 Description: The issue is related to a Double Free vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploite...

PT-2022-37394 · Diplib · Diplib

Name of the Vulnerable Software and Affected Versions: diplib version 3.0.0 Description: The issue is related to a Double Free error. Recommendations: For diplib version 3.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2022-42747

CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks...

CVE-2022-42746

CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks...

CVE-2022-42749

CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks...

CVE-2022-42745

CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because the application is vulnerable to XXE...

Cross site scripting

CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks...

Xxe

CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because the application is vulnerable to XXE...

CVE-2022-42751

CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions...

CVE-2022-42746

CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks...

CandidATS 跨站请求伪造漏洞

CandidATS is a free and open source recruiter tracking system from CandidATS India. A security vulnerability exists in CandidATS version 3.0.0. An attacker can elevate privileges by exploiting the vulnerability...

CVE-2022-42751

CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions...

CVE-2022-42747

CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks...