3207 matches found
CVE-2022-36141
SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::MethodBody::writeSWF::Writer, SWF::Context...
Vesta Control Panel 跨站脚本漏洞
Vesta Control Panel VestaCP is an open source web hosting control panel. A security vulnerability exists in Vesta Control Panel version v1.0.0-5, which stems from a security issue in the body function of UploadHandler.php...
CVE-2022-36305: Improper Neutralization of Input During Web Page Generation
Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the body function at /web/api/v1/upload/UploadHandler.php...
Denial Of Service (DoS)
github.com/kubeedge/kubeedge is vulnerable to denial of service. An attacker can crash the application by sending a malicious HTTP request with a large body into the registerValidateWebhook function of common.go...
KubeEdge 资源管理错误漏洞
KubeEdge is KubeEdge open source a Kubernetes native edge computing framework. Built on Kubernetes and extends native containerized application orchestration and device management to edge hosts. A resource management error vulnerability exists in KubeEdge versions prior to 1.11.1, 1.10.2, and...
CVE-2022-31074: Uncontrolled Resource Consumption
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1, 1.10.2, and 1.9.4, several endpoints in the Cloud AdmissionController may be susceptible to a DoS attack if an HTTP request containing a very lar...
tomcat: Request mix-up with h2c
A flaw was found in Apache Tomcat. When responding to new h2c connection requests, Apache Tomcat could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results of user A's request. The highest threat from this...
CVE-2022-31127 Improper handling of email input in next-auth
NextAuth.js is a complete open source authentication solution for Next.js applications. An attacker can pass a compromised input to the e-mail signin endpoint that contains some malicious HTML, tricking the e-mail server to send it to the user, so they can perform a phishing attack. Eg.:...
The vulnerability of the decode/encodeBody component in the Envoy proxy server allows a attacker to induce a service failure.
The vulnerability of the decode/encodeBody component in the Envoy proxy server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by uploading a specially created zip file...
GSD-2022-1003031 f2fs: fix dereference of stale list iterator after loop body
f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...
Malicious code in body-complex-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e27fea97b9d518665eef95629efaf4c554bdce153227e8a69e10978c9af8ec4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1637 Malicious code in body-complex-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e27fea97b9d518665eef95629efaf4c554bdce153227e8a69e10978c9af8ec4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1639 Malicious code in body-string-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d5906e08fd5b0e690abbc491c404720f69bfaa3ba84fae8bf7938522c6ac64f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in body-time (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ef5475299e1bccf37ad706980da6d61ba321440e60e64e91284797f2c69a127 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1636 Malicious code in body-complex (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef48c53ad39055a3692dbe528815988861df665507cc31c52dad47e5f746b3e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in body-complex (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef48c53ad39055a3692dbe528815988861df665507cc31c52dad47e5f746b3e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Privilege Escalation via edit response body
Description Recently, i found a business logic vulnerabity and this vulnerability allow reader user perform privilege escalation on allaccess user. Because before user perform any function, client-side will perform OPTIONS request to view user permission with specify function via response body. I...
WordPress Like Button Rating plugin Access Control Error Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...
