1919 matches found
CVE-2022-3214
Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to 1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing...
CVE-2022-2472
Improper Initialization vulnerability in the local server component of EZVIZ CS-C6N-A0-1C2WFR allows a local attacker to read the contents of the memory space containing the encrypted admin password. This issue affects: EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428...
Apple IOS 安全漏洞
Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple IOS prior to version 16, which stems from the fact that in the iPhone 8 series and later iPhones, someone with physical access to the iOS device may be able...
CVE-2022-40324
SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR 67258...
CVE-2022-39846
DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.220833 allows attacker to execute arbitrary code...
CVE-2022-36867
Improper access control vulnerability in Editor Lite prior to version 4.0.40.14 allows attackers to access sensitive information...
CVE-2022-36539
WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...
InfluxData InfluxDB 安全漏洞
InfluxData InfluxDB is a Go-based development of temporal databases from the US company InfluxData. A security vulnerability exists in InfluxData InfluxDB versions prior to v1.8.10, which stems from not including any authentication mechanisms or controls. An attacker could exploit this...
Google Chrome 竞争条件问题漏洞
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 105.0.5195.52, which stems from a mix-up in the instruction responsible for freeing memory in SplitScreen. An attacker could exploit this vulnerability...
CVE-2022-2982
Use After Free in GitHub repository vim/vim prior to 9.0.0260...
CVE-2022-1513
A potential vulnerability was reported in Lenovo PCManager prior to version 5.0.10.4191 that may allow code execution when visiting a specially crafted website...
CVE-2022-2965
Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7...
CVE-2022-2923
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240...
CVE-2022-2930
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3...
PYSEC-2022-43142
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3...
PYSEC-2022-43142
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-1021
Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...
CVE-2021-44470
Incorrect default permissions for the IntelR Connect M Android application before version 1.7.4 may allow an authenticated user to potentially enable information disclosure via local access...