2014 matches found
CVE-2022-1813
OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0...
CVE-2022-29877
A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850...
CVE-2022-1730
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 18.0.4...
Mangboard commerce package 输入验证错误漏洞
Mangboard commerce package is an e-commerce website plugin from the Korean company Mangboard. A security vulnerability exists in Mangboard commerce package prior to version 1.3.8, which stems from improper input validation. A remote attacker can exploit the vulnerability to manipulate the total...
PYSEC-2022-200
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-28616
A remote server-side request forgery ssrf vulnerability was discovered in HPE OneView versions: Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView...
CVE-2022-23706
A remote cross-site scripting xss vulnerability was discovered in HPE OneView versions: Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView...
CVE-2022-1711
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.5...
Bootstrap-Table 跨站脚本漏洞
Bootstrap-Table is an open source extension table integrated with some of the most widely used Css frameworks by individual developers at Wenzhixin. A security vulnerability exists in Bootstrap-Table versions prior to 1.20.2. An attacker could exploit this vulnerability to disclose session cookie...
CVE-2022-28162
Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text...
CVE-2022-28162
Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text...
CVE-2022-26068
This affects the package pistacheio/pistache before 0.0.3.20220425. It is possible to traverse directories to fetch arbitrary files from the server...
CVE-2022-1543
Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentary outage in a production environment. That can lead to memory corruption on the server...
CVE-2022-22521
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...
CVE-2022-27629
Cross-site request forgery CSRF vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote unauthenticated attacker to hijack the authentication of an administrator and perform unintended operation via unspecified vectors...
DEBIAN-CVE-2021-42780
A use after return issue was found in Opensc before version 0.22.0 in insertpin function that could potentially crash programs using the library...
Juniper Networks Contrail Service Orchestration 安全漏洞
Juniper Networks Contrail Service Orchestration is a powerful software platform from Juniper Networks, Inc. for connecting many enterprise and multi-tenant service provider solutions. A security vulnerability exists in Juniper Networks Contrail Service Orchestration CSO versions prior to 6.0.0 th...
AZL-45141 CVE-2022-0436 affecting package js-jquery 3.5.0-4
Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...
Mz Automation Libiec61850 输入验证错误漏洞
Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. An input validation error vulnerability exists in Mz Automation Libiec61850 prior to 1.5.1, where an unauthenticated attacker could craft a goose message to cause a denial of service...