2014 matches found
DEBIAN-CVE-2022-2279
NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11...
CVE-2022-2257
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0...
UBUNTU-CVE-2022-2084
Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords...
PT-2022-3295 · Mozilla · Firefox
Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 102 Description: The issue is related to the handling of HTTP requests, which could allow a remote attacker to bypass existing security restrictions and disclose protected information using the HTTP referer...
CVE-2022-0085
Server-Side Request Forgery SSRF in GitHub repository dompdf/dompdf prior to 2.0.0...
Advantech iView SQL注入漏洞
Advantech iView, a software based on Simple Network Protocol SNMP for managing B B SmartWorx devices from Advantech, China, is vulnerable to a SQL injection vulnerability in versions prior to Advantech iView 5.7.04.6469, which results from the use of special elements in SQL commands that are not...
Huawei MindSpore Community数字错误漏洞
Huawei MindSpore Community is an open source deep learning framework from Huawei, China. A security vulnerability exists in Huawei MindSpore Community versions prior to 1.3.0, which stems from a divide-by-0 exception when performing the derived shape operation of the SpaceToBatch operator if the...
CVE-2022-2113
Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.7.2...
CVE-2022-32254
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. A customized HTTP POST request could force the application to write the status of a given user to a log file, exposing sensitive user information that could provide valuable guidance to an attacker...
CVE-2022-2062
Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-1993
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...
Gogs 路径遍历漏洞
Gogs Go Git Service is a Go-based self-service Git hosting service from the GOGS team that supports creating and migrating public/private repositories, adding and removing repository collaborators, and more. A security vulnerability exists in Gogs versions prior to 0.12.9, which stems from a path...
CVE-2022-1005
The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUESTURI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting XSS in web browsers which do not encode characters...
CVE-2022-30743
Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission...
CVE-2022-30749
Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity...
CVE-2022-30732
Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access sensitive information via onActivityResult...
CVE-2022-1285
Server-Side Request Forgery SSRF in GitHub repository gogs/gogs prior to 0.12.8...
CVE-2022-1947
Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3...