1918 matches found
RocketChat LiveChat 跨站脚本漏洞
RocketChat LiveChat is a small, lightweight application from RocketChat Inc. designed to provide B2C business-to-customer communication between agents and website visitors. A cross-site scripting vulnerability exists in RocketChat LiveChat versions prior to 1.9, which can be exploited by an...
CVE-2022-0350
Cross-site Scripting XSS - Stored in GitHub repository vanessa219/vditor prior to 3.8.13...
CVE-2022-1160
heap buffer overflow in getonesourceline in GitHub repository vim/vim prior to 8.2.4647...
CVE-2022-26059
Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...
CVE-2022-0955
Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...
Microweber 输入验证错误漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber before 1.2.12, which stems from the fact...
CVE-2022-22687
Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in Authentication functionality in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2021-41810
Script injection in M-Files Admin versions before 22.2.11051.0, allows executing stored script in admin tool. M-Files Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely...
CVE-2022-27193
CVRF-CSAF-Converter before 1.0.0-rc2 resolves XML External Entities XXE. This leads to the inclusion of arbitrary local file content into the generated output document. An attacker can exploit this to disclose information from the system running the converter...
CVE-2021-45888
An issue was discovered in PONTON X/P Messenger before 3.11.2. The navigation tree that is shown on the left side of every page of the web application is vulnerable to XSS: it allows injection of JavaScript into its nodes. Creating such nodes is only possible for users who have the role...
CVE-2022-0912
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0895
Static Code Injection in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0896
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0533
The Ditty formerly Ditty News Ticker WordPress plugin before 3.0.15 is affected by a Reflected Cross-Site Scripting XSS vulnerability...
ZOHO ManageEngine SharePoint Manager Plus 安全漏洞
ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. An authorization issue vulnerability exists in versions prior to ZOHO ManageEngine SharePoint Manager Plus 4329, which stems from a network system or The vulnerability is caused by a lack of...
CVE-2021-40043
The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4H100SP13C00. The devices cannot effectively defend against external malicious interference. Attackers need the device to be visually exploitable and successful triggering of this vulnerabili...
CVE-2022-24346
In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO Right-to-Left Override characters was possible...
CVE-2022-0746
Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...
CVE-2021-43943
Affected versions of Atlassian Jira Service Management Server and Data Center allow attackers with administrator privileges to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the "Object Schema" field of /secure/admin/InsightDefaultCustomFieldConfig.jspa. The...