679 matches found
RPCMS 跨站请求伪造漏洞
RPCMS is a software application. A website CMS system. A security vulnerability exists in RPCMS version v3.0.2, which stems from a vulnerability that allows an attacker to arbitrarily change the password of any account...
Apache Kafka vulnerability can lead to brokers hitting OutOfMemoryException, causing Denial of Service
A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability allows malicious unauthenticated clients to allocate large amounts of memory on brokers. This can lead to brokers hitting OutOfMemoryException and causing denial of service. Exampl...
CVE-2022-34917 Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers
A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability allows malicious unauthenticated clients to allocate large amounts of memory on brokers. This can lead to brokers hitting OutOfMemoryException and causing denial of service. Exampl...
cruddl vulnerable to ArangoDB Query Language (AQL) injection through flexSearch
Impact If a vunerable version of cruddl is used to generate a schema that uses @flexSearchFulltext, users of that schema may be able to inject arbitrary AQL queries that will be forwarded to and executed by ArangoDB. Schemas that do not use @flexSearchFulltext are not affected. The attacker needs...
PT-2022-4953
Name of the Vulnerable Software and Affected Versions: @next-auth/upstash-redis-adapter versions prior to 3.0.2 Description: The Upstash Redis adapter implementation did not check for both the identifier email and the token, but only checked for the identifier when verifying the token in the emai...
Security update for freeciv (important)
openSUSE Security Update: Security update for freeciv Announcement ID: openSUSE-SU-2022:10096-1 Rating: important References: 1202548 Cross-References: CVE-2022-6083 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes one vulnerability is now available. Description: This update...
CVE-2022-36261
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt...
CVE-2022-36261
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt...
CVE-2022-36261
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt...
CVE-2022-36261
CVE-2022-36261 affects taocms 3.0.2. The connected sources describe an arbitrary file deletion flaw exploitable via a crafted request to admin.php?action=file&ctrl=del&path=/../../../test.txt, indicating a path traversal issue that can delete server files. The NVD notes a CVSS v3.1 base score of ...
taoCMS 路径遍历漏洞
taoCMS is a micro CMS Content Management System in China. A security vulnerability exists in taoCMS version 3.0.2. An attacker can exploit this vulnerability to delete arbitrary files...
PT-2022-21895 · WordPress · Easy Digital Downloads
Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads plugin versions prior to 3.0.2 Description: A PHP Object Injection issue affects the Easy Digital Downloads plugin at WordPress. Recommendations: For versions prior to 3.0.2, update to version 3.0.2 or later to resolve...
Code injection
An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php...
PT-2022-23280 · Taocms · Taocms
Name of the Vulnerable Software and Affected Versions: taocms version 3.0.2 Description: An issue was discovered in the website settings that allows arbitrary php code to be injected by modifying config.php. Recommendations: For taocms version 3.0.2, consider restricting access to the config.php...
taoCMS 代码注入漏洞
taoCMS is a Chinese micro CMS Content Management System. A security vulnerability exists in taoCMS version 3.0.2, which is caused by allowing arbitrary php code to be injected into the site settings by modifying config.php...
PT-2022-22178 · WordPress · Shortcode Addons
Name of the Vulnerable Software and Affected Versions: biplob018's Shortcode Addons plugin versions 3.0.2 and earlier Description: The issue is related to an Unauthenticated Arbitrary Option Update vulnerability. This allows for unauthorized modifications to options. Recommendations: For versions...
CVE-2021-44915
Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category...
CVE-2021-44915
Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category...