1919 matches found
CVE-2022-28616
A remote server-side request forgery ssrf vulnerability was discovered in HPE OneView versions: Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView...
CVE-2022-23706
A remote cross-site scripting xss vulnerability was discovered in HPE OneView versions: Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView...
CVE-2022-1711
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.5...
Bootstrap-Table 跨站脚本漏洞
Bootstrap-Table is an open source extension table integrated with some of the most widely used Css frameworks by individual developers at Wenzhixin. A security vulnerability exists in Bootstrap-Table versions prior to 1.20.2. An attacker could exploit this vulnerability to disclose session cookie...
CVE-2022-28162
Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text...
CVE-2022-28162
Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text...
CVE-2022-26068
This affects the package pistacheio/pistache before 0.0.3.20220425. It is possible to traverse directories to fetch arbitrary files from the server...
CVE-2022-1543
Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentary outage in a production environment. That can lead to memory corruption on the server...
CVE-2022-22521
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...
CVE-2022-27629
Cross-site request forgery CSRF vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote unauthenticated attacker to hijack the authentication of an administrator and perform unintended operation via unspecified vectors...
DEBIAN-CVE-2021-42780
A use after return issue was found in Opensc before version 0.22.0 in insertpin function that could potentially crash programs using the library...
Juniper Networks Contrail Service Orchestration 安全漏洞
Juniper Networks Contrail Service Orchestration is a powerful software platform from Juniper Networks, Inc. for connecting many enterprise and multi-tenant service provider solutions. A security vulnerability exists in Juniper Networks Contrail Service Orchestration CSO versions prior to 6.0.0 th...
AZL-45141 CVE-2022-0436 affecting package js-jquery 3.5.0-4
Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...
Mz Automation Libiec61850 输入验证错误漏洞
Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. An input validation error vulnerability exists in Mz Automation Libiec61850 prior to 1.5.1, where an unauthenticated attacker could craft a goose message to cause a denial of service...
CVE-2022-1045
Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0...
CVE-2022-27271
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...
CVE-2022-0607
Use after free in GPU in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-1233
URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11...