1919 matches found
Advantech iView SQL注入漏洞
Advantech iView, a software based on Simple Network Protocol SNMP for managing B B SmartWorx devices from Advantech, China, is vulnerable to a SQL injection vulnerability in versions prior to Advantech iView 5.7.04.6469, which results from the use of special elements in SQL commands that are not...
Huawei MindSpore Community数字错误漏洞
Huawei MindSpore Community is an open source deep learning framework from Huawei, China. A security vulnerability exists in Huawei MindSpore Community versions prior to 1.3.0, which stems from a divide-by-0 exception when performing the derived shape operation of the SpaceToBatch operator if the...
CVE-2022-2113
Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.7.2...
CVE-2022-32254
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. A customized HTTP POST request could force the application to write the status of a given user to a log file, exposing sensitive user information that could provide valuable guidance to an attacker...
CVE-2022-2062
Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-1993
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...
Gogs 路径遍历漏洞
Gogs Go Git Service is a Go-based self-service Git hosting service from the GOGS team that supports creating and migrating public/private repositories, adding and removing repository collaborators, and more. A security vulnerability exists in Gogs versions prior to 0.12.9, which stems from a path...
CVE-2022-1005
The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUESTURI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting XSS in web browsers which do not encode characters...
CVE-2022-30749
Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity...
CVE-2022-30743
Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission...
CVE-2022-30732
Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access sensitive information via onActivityResult...
CVE-2022-1285
Server-Side Request Forgery SSRF in GitHub repository gogs/gogs prior to 0.12.8...
CVE-2022-1947
Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3...
DEBIAN-CVE-2022-1886
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
Erudika Para 安全漏洞
Erudika Para is a command line interface from Erudika Bulgaria. A security vulnerability exists in Erudika Para prior to version 1.45.11 that stems from a business logic error...
CVE-2022-1813
OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0...
CVE-2022-29877
A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850...
CVE-2022-1730
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 18.0.4...
Mangboard commerce package 输入验证错误漏洞
Mangboard commerce package is an e-commerce website plugin from the Korean company Mangboard. A security vulnerability exists in Mangboard commerce package prior to version 1.3.8, which stems from improper input validation. A remote attacker can exploit the vulnerability to manipulate the total...
