CVE-2022-42147

kkFileView 4.0 is vulnerable to Cross Site Scripting XSS via controller\ Filecontroller.java...

CVE-2022-42147

CVE-2022-42147 affects kkFileView 4.0. The provided documents identify a Cross Site Scripting (XSS) vulnerability via the file controller component named Filecontroller.java . The CVE entry lists a base CVSS v3.1 score of 6.1 (Impact: Confidentiality/Integrity Low, Availability None; Network atta...

CVE-2022-41323

In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression...

PT-2022-25840 · Ocomon · Ocomon

Name of the Vulnerable Software and Affected Versions: OcoMon version 4.0 Description: A SQL injection issue was discovered in OcoMon via the cod parameter at the "showImg.php" endpoint. This allows for potential exploitation of the database. Recommendations: For OcoMon version 4.0, consider...

lock order inversion in transitive grant copy handling

ISSUE DESCRIPTION As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be acquired nested within one another, b...

Important Photon OS Security Update - PHSA-2022-4.0-0257

Updates of 'unbound' packages of Photon OS have been released...

WordPress WP Page Widget plugin <= 3.9 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability was discovered by Muhammad Daffa Patchstack Alliance in the WordPress WP Page Widget plugin versions = 3.9. Solution Update the WordPress WP Page Widget plugin to the latest available version at least 4.0...

Important Photon OS Security Update - PHSA-2022-4.0-0250

Updates of 'linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-4.0-0249

Updates of 'expat' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-4.0-0248

Updates of 'linux-aws', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

Tenhot TWS-100 安全漏洞

The Tenhot TWS-100 is a gateway router that combines gateway functionality with AC management functionality from China-based Tenhot. A security vulnerability exists in the Tenhot TWS-100 V4.0-201809201424 router that stems from the presence of a remote code execution RCE vulnerability...

PT-2022-24115 · Tenhot · Tenhot Tws-100

Name of the Vulnerable Software and Affected Versions: Tenhot TWS-100 version 4.0-201809201424 Description: There is a remote code execution issue in the Tenhot TWS-100 router device. The device account password can be used to execute system commands through the network diagnostic component's...

Important Photon OS Security Update - PHSA-2022-4.0-0245

Updates of 'libtiff', 'bluez' packages of Photon OS have been released...

PCI DSS Tackles Client-Side Attacks: Everything You Need to Know About Complying With PCI 6.4.3

Client-side attacks often referred to as Magecart attacks have been around since as early as 2015 and dramatically gained in popularity when the global pandemic accelerated digital transformation, by driving more people and data online. Now the fight against these attacks is stepping up a notch...

WordPress 4.0.x < 4.0.36 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A SQL injection vulnerability within the Link API. - A Cross-Site Scripting XSS vulnerability on the Plugins screen. - An output escaping issue within themeta. Note that t...

SUSE: Security Advisory (SUSE-SU-2022:3144-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2022-4.0-0244

Updates of 'ImageMagick' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-4.0-0242

Updates of 'go' packages of Photon OS have been released...

SUSE: Security Advisory (SUSE-SU-2022:3103-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2990-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...