6722 matches found
CVE-2022-21705 Authenticated remote code execution in octobercms
Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework. In affected versions user input was not properly sanitized before rendering. An authenticated user with the permissions to create, modify and delete website pages can exploit this vulnerability to bypass cms.safemode /...
CVE-2022-24130
xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...
CVE-2021-40407
An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 1 or 2, based on DDNS type, the ddns-domain variable, that has the value of the domain parameter provided through the SetDdns API, is not validated properly. This...
CVE-2021-44463 Emerson DeltaV Uncontrolled Search Path Element
Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations All versions when some DeltaV services are started...
CVE-2021-4034
creationtimestamp| type| source ---|---|--- 2022-01-25 18:42:48+00:00| seen| https://t.me/ctinow/45794 2022-01-26 00:02:43+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1388 2022-01-26 01:07:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1389 2022-01-26...
CVE-2022-22891
Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecmarefobjectinline in /jerry-core/ecma/base/ecma-gc.c...
CVE-2021-28712
Rogue backends can cause DoS of guests via high frequency events This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "drive...