CVE-2022-0602

Cross-site Scripting XSS - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0...

CVE-2022-0602 Cross-site Scripting (XSS) - DOM in tastyigniter/tastyigniter

Cross-site Scripting XSS - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0...

TastyIgniter 跨站脚本漏洞

TastyIgniter is a free and open source online ordering software based on the Laravel PHP Framework designed for developers and restaurateurs to enjoy life. A cross-site scripting vulnerability previously existed in TastyIgniter 3.3.0. No information about this vulnerability is available at this...

PT-2022-13503 · WordPress · Ninja Forms - File Uploads Extension

Name of the Vulnerable Software and Affected Versions: Ninja Forms - File Uploads Extension WordPress plugin versions up to and including 3.3.0 Description: The issue is related to insufficient input file type validation found in the /includes/ajax/controllers/uploads.php file, which can be...

CVE-2022-24433

The package simple-git before 3.3.0 are vulnerable to Command Injection via argument injection. When calling the .fetchremote, branch, handlerFn function, both the remote and branch parameters are passed to the git fetch subcommand. By injecting some git options it was possible to get arbitrary...

PT-2022-16694 · Unknown · Simple-Git

Name of the Vulnerable Software and Affected Versions: simple-git versions prior to 3.3.0 Description: The issue allows for Command Injection via argument injection. When calling the fetch function with parameters remote, branch, and handlerFn, both the remote and branch parameters are passed to...

15Zine < 3.3.0 - Reflected Cross-Site Scripting

Description The theme does not sanitise and escape the cbi parameter before outputing it back in the response via the cbsa AJAX action, leading to a Reflected Cross-Site Scripting https://example.com/wp-admin/admin-ajax.php?action=cbsa&cbi=alert/XSS/;...

15Zine < 3.3.0 - Reflected Cross-Site Scripting

Description The theme does not sanitise and escape the cbi parameter before outputing it back in the response via the cbsa AJAX action, leading to a Reflected Cross-Site Scripting PoC https://example.com/wp-admin/admin-ajax.php?action=cbsa=...

Cobbler < 3.3.1 Multiple Vulnerabilities

Cobbler is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

com.savoirtech.aetos:aetos (>=4.2.0.1 <=4.2.2), de.mhus.app.vault:vault-playground-assembly (>=7.2.0 <=7.3.0) +82 more potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (>=3.3.0 <=3.3.5)

org.apache.cxf:cxf-rt-management MAVEN version =3.3.0, =4.2.0.1, =7.2.0, =6.3.0, =1.2.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.7, =1.0.7, =4.2.11.hyte-42116, =4.2.11.hyte-42116, =4.2.11.hyte-42116, =4.2.11.hyte-42119 and more Source cves: CVE-2020-1954 Source advisory:...

ai.hyacinth.framework:core-service-jpa-support (>=0.5.2 <=0.5.21), ai.hyacinth.framework:core-service-trigger-server (>=0.5.2 <=0.5.21) +6110 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (>=3.3.0.CR1 <=5.3.1.Final)

org.hibernate:hibernate-core MAVEN version =3.3.0.CR1, =0.5.2, =0.5.2, =1.0.0, =1.0.0, =1.0.1, =1.0.1, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.6 and more Source cves: CVE-2020-25638 Source advisory: OSV:GHSA-J8JW-G6FQ-MP7H...

PT-2021-16397 · WordPress · Simple Jwt Login

Name of the Vulnerable Software and Affected Versions: Simple JWT Login WordPress plugin versions prior to 3.3.0 Description: The issue allows creation of new WordPress user accounts with a randomly generated password. The password generation uses the str shuffle PHP function, which does not...

aglow (>=0.1.0rc3 <=0.1.0rc4), ai-flow (>=0.1.0 <=0.3.1) +113 more potentially affected by CVE-2021-41265 via flask-appbuilder (>=1.10.0 <=3.3.0)

flask-appbuilder PYPI version =1.10.0, =0.1.0rc3, =0.1.0, =2022.9.19, =1.0.7, =0.5.1, =0.1.0, =1.0.0, =0.0.7, =0.0.1, =0.1.6, =0.0.2, =1.0.0, =1.10.0, =1.10.3, =2.0.1rc2 and more Source cves: CVE-2021-41265 Source advisory: OSV:PYSEC-2021-851...

PT-2021-7494 · Gdal +1 · Gdal +1

Name of the Vulnerable Software and Affected Versions: GDAL versions 3.3.0 through 3.4.0 Description: The issue is related to a heap-based buffer overflow in the PCIDSK::CPCIDSKFile::ReadFromFile function, which can be exploited by a remote attacker to cause a denial of service. This function is...

Tao Open Source Assessment Platform 注入漏洞

Tao Open Source Assessment Platform is an open source assessment platform from Tao, Luxembourg. A security vulnerability exists in TAO Open Source Assessment Platform version 3.3.0 RC02, which can be exploited by attackers to conduct phishing attacks, external redirection and arbitrary code...

PYSEC-2021-374

Cobbler before 3.3.0 allows arbitrary file write operations via uploadlogdata...

CVE-2021-40323

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection...

CVE-2021-40325

Cobbler before 3.3.0 allows authorization bypass for modification of settings...

Cobbler 安全漏洞

Cobbler is a Linux installation server that allows for quick setup of network installation environments.Cobbler is vulnerable to authorization issues in versions prior to 3.3.0.The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network...

Dell Enterprise Sonic Os 信息泄露漏洞

Dell Enterprise Sonic Os Dell Enterprise Sonic OS is an open source network operating system from Dell Dell. An information disclosure vulnerability exists in Dell Enterprise SONiC OS 3.3.0 and earlier versions, which can be exploited by an authenticated, malicious user to gain access to the syst...