6722 matches found
CVE-2022-31115 Unsafe YAML deserialization in opensearch-ruby
opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. In versions prior to 2.0.1 the ruby YAML.load function was used instead of YAML.safeload. As a result opensearch-ruby 2.0.0 and prior can lead to unsafe deserialization using YAML.load if the response is of type YAML. ...
CVE-2021-40944
In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...
SUSE-SU-2022:2179-1 Security update for openssl
This update for openssl fixes the following issues: - CVE-2022-2068: Fixed more shell code injection issues in crehash. bsc1200550...
CVE-2022-30556
creationtimestamp| type| source ---|---|--- 2022-06-09 20:33:48+00:00| seen| https://t.me/cibsecurity/44132 2024-10-15 10:14:15+00:00| seen| Telegram/HfSunJuoYNfbsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ 2025-05-13 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-133-01...
SUSE-SU-2022:1911-1 Security update for hdf5, suse-hpc
This update for hdf5, suse-hpc fixes the following issues: Security issues fixed: - CVE-2020-10811: Fixed heap-based buffer over-read in the function H5Olayoutdecode located in H5Olayout.c bsc1167405. - CVE-2020-10810: Fixed NULL pointer dereference in the function H5ACunpinentry located in H5AC....
CVE-2022-29643
CVE-2022-29643 affects TOTOLINK A3100R routers. The issue is a stack overflow in setMacQos via the macAddress parameter , present in firmware versions V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 . This vulnerability enables a Denial of Service (DoS) by sending a crafted POST request. Conn...
new packages: criu
An update is available for criu. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...
Exploit for Code Injection in Vmware Spring_Framework
漏洞简介 最近spring爆出重磅级CVE漏洞，cve信息显示"A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot...
CVE-2022-1020
creationtimestamp| type| source ---|---|--- 2022-04-18 22:23:57+00:00| seen| https://t.me/cibsecurity/41067 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-01-26 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...
CVE-2022-24776 Open Redirect in Flask-AppBuilder
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login page on versions below 3.4.5. This issue is fixed in version 3.4.5. There are currently no known...
CVE-2022-21146 ICSA-22-062-01 IPCOMM ipDIO
Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into a specific parameter. The XSS payload will be executed when a legitimate user attempts to review history...
CVE-2022-22706
creationtimestamp| type| source ---|---|--- 2022-03-03 18:26:10+00:00| seen| https://t.me/cibsecurity/38361 2022-09-08 13:17:27+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6761 2022-11-22 21:05:00+00:00| seen|...