CVE-2022-0721

Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0719

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.3...

UBUNTU-CVE-2016-1239

duck before 0.10 did not properly handle loading of untrusted code from the current directory...

UBUNTU-CVE-2022-0623

Out-of-bounds Read in Homebrew mruby prior to 3.2...

AZL-39665 CVE-2022-21698 affecting package cri-o for versions less than 1.21.7-2

clientgolang is the instrumentation library for Go applications in Prometheus, and the promhttp package in clientgolang provides tooling around HTTP servers and clients. In clientgolang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and...

UBUNTU-CVE-2022-0295

Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page...

UBUNTU-CVE-2022-0100

Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-24926

Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.15-6 allows privileged attackers to trigger a XSS on a victim's devices...

CVE-2022-23631

superjson is a program to allow JavaScript expressions to be serialized to a superset of JSON. In versions prior to 1.8.1 superjson allows input to run arbitrary code on any server using superjson input without prior authentication or knowledge. The only requirement is that the server implements ...

chatwoot 安全漏洞

chatwoot is a software application. Customer Engagement Suite, an open source alternative to Intercom, Zendesk, Salesforce Service Cloud, and more. A security vulnerability exists in versions of chatwoot prior to v2.2, which stems from improper permissions management in the GitHub repository prio...

CVE-2022-22142

Reflected cross-site scripting vulnerability in the checkbox of phpmailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors...

UBUNTU-CVE-2022-0414

Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0...

AZL-8459 CVE-2022-0408 affecting package vim for versions less than 8.2.4743-1

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

UBUNTU-CVE-2022-0413

Use After Free in GitHub repository vim/vim prior to 8.2...

PYSEC-2022-22

Improper Access Control in Pypi calibreweb prior to 0.6.16...

Calibre-Web 代码问题漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. Calibre-Web suffers from a code issue vulnerability that stems from server-side request forgery SSRF in Pypi calibreweb before 0.6.16...

多款Schneider Electric产品安全漏洞

Schneider Electric EVlink City and others are a charging solution for electric vehicle charging stations from Schneider Electric, a French company. A security vulnerability exists in a number of Schneider Electric products, which stems from. The vulnerability allows an attacker to gain unauthoriz...

多款Schneider Electric产品跨站请求伪造漏洞

Schneider Electric EVlink City, among others, is a charging solution for electric vehicle charging stations from Schneider Electric, a French company. A cross-site request forgery vulnerability exists in several Schneider Electric products, which can be exploited by an attacker to impersonate a...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in versions of microweber prior to 1.2.11,...

CVE-2021-25080

The Contact Form Entries WordPress plugin before 1.1.7 does not validate, sanitise and escape the IP address retrieved via headers such as CLIENT-IP and X-FORWARDED-FOR, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against logged in admins viewing the created entry...