1919 matches found
AZL-10544 CVE-2021-33645 affecting package libtar for versions less than 1.2.20-10
The thread function doesn’t free a variable t-thbuf.gnulonglink after allocating memory, which may cause a memory leak...
CVE-2022-2734
Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-36836
Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection state without permission...
CVE-2022-2631
Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0...
UBUNTU-CVE-2022-2161
Use after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who convinced the user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions...
Synology Media Server 信息泄露漏洞
Synology Media Server is a media server. An information disclosure vulnerability exists in Synology Media Server versions prior to 1.8.1-2876, which can be exploited by remote attackers to obtain sensitive information via unspecified vectors...
UBUNTU-CVE-2022-1855
Use after free in Messaging in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2022-1479
Use after free in ANGLE in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2022-1314
Type confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag-and-drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.2.21, which...
DEBIAN-CVE-2022-2400
External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...
CVE-2022-2118
The 404s WordPress plugin before 3.5.1 does not sanitise and escape its fields, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
PT-2022-21822 · Samsung · Samsung Gallery
Name of the Vulnerable Software and Affected Versions: Samsung Gallery versions prior to 13.1.05.8 Description: The issue is related to improper access control, allowing physical attackers to access pictures using the S Pen air gesture. Recommendations: For versions prior to 13.1.05.8, update to...
ALPINE-CVE-2022-2287
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0...
UBUNTU-CVE-2022-2285
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0...
DEBIAN-CVE-2022-2279
NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11...
CVE-2022-2257
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0...
UBUNTU-CVE-2022-2084
Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords...
PT-2022-3295 · Mozilla · Firefox
Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 102 Description: The issue is related to the handling of HTTP requests, which could allow a remote attacker to bypass existing security restrictions and disclose protected information using the HTTP referer...