com.instaclustr:cassandra-lucene-index-plugin (4.0.0-1.0.0), com.instaclustr:ic-sstable-tools-4.0.0 (1.0.0) +8 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (>=4.0.0, <=4.0.1)

org.apache.cassandra:cassandra-all MAVEN version =4.0.0, =4.4.0.0, =4.4.0.0, =1.0.31, =1.0.31, =2.0.0, =2.0.1 Source cves: CVE-2021-44521 Source advisory: MEND:CVE-2021-44521...

PT-2022-9276 · Unknown · Conext Combox

Name of the Vulnerable Software and Affected Versions: Conext ComBox All Versions Description: A vulnerability exists that could cause sensitive data, such as login credentials, to be exposed when a network is sniffed. This issue could lead to the exposure of sensitive information. Recommendation...

PT-2022-13257 · Subiquity · Subiquity

Name of the Vulnerable Software and Affected Versions: Subiquity affected versions not specified Description: The issue concerns Subiquity showing guided storage passphrases in plaintext with read-all permissions. Recommendations: At the moment, there is no information about a newer version that...

CVE-2022-0555

Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions...

UBUNTU-CVE-2022-0555

Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions...

CVE-2022-24321

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA All Versions, EcoStruxure Geo SCADA Expert 2019 All Versions, EcoStruxure Geo...

CVE-2022-24319

A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA web server are intercepted. Affected Product: ClearSCADA All Versions, EcoStruxure Geo SCADA Expert 2019 All Versions, EcoStruxure Geo...

ai.grakn.kgms:client (1.4.3), ai.grakn:client-java (>=1.4.1, <=1.4.3) +104 more potentially affected by CVE-2020-17516 via org.apache.cassandra:cassandra-all (>=3.11.0, <=3.11.9)

org.apache.cassandra:cassandra-all MAVEN version =3.11.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2020-17516 Source advisory: OSV:GHSA-2VXM-VP4C-FJFW...

ai.grakn:grakn (>=0.13.0, <=0.14.0), ai.grakn:grakn-client (>=0.13.0, <=0.14.0) +186 more potentially affected by CVE-2020-17516 via org.apache.cassandra:cassandra-all (>=2.1.0, <=3.0.23)

org.apache.cassandra:cassandra-all MAVEN version =2.1.0, =0.13.0, =0.13.0, =0.13.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.13.0, =0.13.0, =0.13.0, =0.13.0, =0.10.0, =0.13.0,...

ai.grakn.kgms:client (1.4.3), ai.grakn:client-java (>=1.4.1, <=1.4.3) +104 more potentially affected by CVE-2020-17516 via org.apache.cassandra:cassandra-all (>=3.11.0, <=3.11.9)

org.apache.cassandra:cassandra-all MAVEN version =3.11.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2020-17516 Source advisory: GHSA-2VXM-VP4C-FJFW...

ai.grakn:grakn (>=0.13.0, <=0.14.0), ai.grakn:grakn-client (>=0.13.0, <=0.14.0) +186 more potentially affected by CVE-2020-17516 via org.apache.cassandra:cassandra-all (>=2.1.0, <=3.0.23)

org.apache.cassandra:cassandra-all MAVEN version =2.1.0, =0.13.0, =0.13.0, =0.13.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.13.0, =0.13.0, =0.13.0, =0.13.0, =0.10.0, =0.13.0,...

PT-2022-15935 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase version 1.6.1 Description: The issue allows an authenticated user to gain unauthorized access to all user information and change the administrator password. Recommendations: For DataEase version 1.6.1, at the moment, there is no...

CVE-2022-0148

The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordPress plugin before 2.0.4 was vulnerable to reflected XSS on the my-sticky-elements-leads admin page...

CVE-2021-24928

The Rearrange Woocommerce Products WordPress plugin before 3.0.8 does not have proper access controls in the saveallorder AJAX action, nor validation and escaping when inserting user data in SQL statement, leading to an SQL injection, and allowing any authenticated user, such as subscriber, to...

CVE-2021-25095

The IP2Location Country Blocker WordPress plugin before 2.26.5 does not have authorisation and CSRF checks in the ip2locationcountryblockersaverules AJAX action, allowing any authenticated users, such as subscriber to call it and block arbitrary country, or block all of them at once, preventing...

CVE-2022-0148 All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)

The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordPress plugin before 2.0.4 was vulnerable to reflected XSS on the my-sticky-elements-leads admin page...

CVE-2022-0148: Improper Neutralization of Input During Web Page Generation

The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordPress plugin before 2.0.4 was vulnerable to reflected XSS on the my-sticky-elements-leads admin page...

CVE-2020-7534

A CWE-352: Cross-Site Request Forgery CSRF vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in. Affected Products: Modicon M340 CPUs: BMXP34 All Versions, Modicon Quantum CPUs with...

Z-Wave 安全特征问题漏洞

Z-Wave is a wireless communication protocol used primarily for home automation. It is a mesh network that uses low power consumption radio waves to communicate from device to device to wirelessly control appliances and other devices in the home, such as controlling lighting, security systems,...

brookemeyerphotography.com Cross Site Scripting vulnerability OBB-2349546

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...