CVE-2022-31846

A vulnerability in livemfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function...

CVE-2022-32285

A vulnerability has been identified in Mendix SAML Module Mendix 7 compatible All versions V1.16.6, Mendix SAML Module Mendix 8 compatible All versions V2.2.2, Mendix SAML Module Mendix 9 compatible All versions V3.2.3. The affected module is vulnerable to XML External Entity XXE attacks due to...

CVE-2022-32285

A vulnerability has been identified in Mendix SAML Module Mendix 7 compatible All versions V1.16.6, Mendix SAML Module Mendix 8 compatible All versions V2.2.2, Mendix SAML Module Mendix 9 compatible All versions V3.2.3. The affected module is vulnerable to XML External Entity XXE attacks due to...

CVE-2022-32285

A vulnerability has been identified in Mendix SAML Module Mendix 7 compatible All versions V1.16.6, Mendix SAML Module Mendix 8 compatible All versions V2.2.2, Mendix SAML Module Mendix 9 compatible All versions V3.2.3. The affected module is vulnerable to XML External Entity XXE attacks due to...

CVE-2022-29524

Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

NocoDB information disclosure vulnerability

In NocoDB prior to 0.91.7, the SMTP plugin doesn't have verification or validation. This allows attackers to make requests to internal servers and read the contents...

SAP Host Agent 代码问题漏洞

SAP Host Agent is a suite of agent programs from SAP Germany that support a number of lifecycle management tasks such as operating system monitoring, database monitoring, and system instance monitoring. A code issue vulnerability exists in SAP NetWeaver, ABAP Platform, and SAP Host Agent. An...

The vulnerability of the scsi_ioctl function in the Linux operating system’s kernel allows a hacker to disclose protected information.

The vulnerability of the scsiioctl function drivers/scsi/scsiioctl.c in the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

PT-2022-2970 · Intel +9 · Sgx Psw +12

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to incomplete cleanup in specific special register write operations, which may allow an authenticated user to potentially enable information disclosure via...

PT-2022-3521 · Schneider Electric · Ecostruxure Power Commission

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Commission versions prior to V2.22 Description: A vulnerability exists that could cause all remote domains to access the resources supplied by the server when an attacker sends a fetch request from a third-party site or...

CVE-2021-46811

HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle CPLC information...

CVE-2021-46811

HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle CPLC information...

apraxa.de Cross Site Scripting vulnerability OBB-2647534

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of Google Chrome browsers, related to the use of memory after it is freed, allows attackers to disclose protected information.

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially created web page...

Information disclosure

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for a subgroup member to access the members list of their parent group...

PT-2022-20192 · Gradle · Gradle Enterprise

Name of the Vulnerable Software and Affected Versions: Gradle Enterprise versions 2022.2.2 and earlier Description: The issue is related to Incorrect Access Control, which can lead to information disclosure. Recommendations: For Gradle Enterprise versions 2022.2.2 and earlier, update to a version...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has an information disclosure vulnerability that originates in gallery3d and photos, which could bypass licensing due to agent confusion and could be exploited by attackers to cause local information...

CVE-2022-26866

Dell PowerStore Versions before v2.1.1.0. contains a Stored Cross-Site Scripting vulnerability. A high privileged network attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user...

The vulnerability of the func2.php function in the web application for managing a medical institution, the PHPGurukul Hospital Management System, allows a perpetrator to disclose protected information.

The vulnerability of the func2.php function in the web application of the PHPGurukul Hospital Management System is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to disclose the protected information remotely...

The vulnerability of the Linux operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Linux operating system’s kernel is related to a flaw in the Cortex and Neoverse processors from Arm. Exploiting this vulnerability can allow attackers to disclose sensitive information by circumventing the eIBRS and CSV2 protection mechanisms...