OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.0.5 version and earlier versions. An attacker exploiting this vulnerability can bypass authentication and attack...

Fuji Electric Monitouch V-SFT和TELLUS 缓冲区错误漏洞

Fuji Electric Monitouch V-SFT and Fuji Electric TELLUS are both products of Fuji Electric Japan.Fuji Electric Monitouch V-SFT is a screen configuration software.Fuji Electric TELLUS is an advanced features, user-friendliness, and specialized software for remote control. A security vulnerability...

PT-2023-14228 · WordPress · Qe Seo Handyman Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Qe SEO Handyman WordPress plugin versions 1.0 and earlier Description: The issue arises from the plugin's failure to properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection. This can be exploite...

PT-2023-14292 · WordPress · Multimedial Images

Name of the Vulnerable Software and Affected Versions: multimedial images WordPress plugin versions 1.0b and earlier Description: The issue arises from the multimedial images WordPress plugin not properly sanitizing and escaping a parameter before using it in a SQL statement. This leads to a SQL...

String Kit 安全漏洞

String Kit is a string manipulation toolkit by the individual developer Cedric Ronvel. A security vulnerability exists in String Kit version 0.12.7 and earlier. An attacker exploited the vulnerability to cause low regular expression complexity...

WordPress plugin Login with Cognito 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

JOBE 安全漏洞

JOBE is a server for running small programming jobs in various programming languages by Richard Lobb, a personal developer. A security vulnerability exists in JOBE version 1.6.4 and earlier versions, which stems from the handling of the parameter sourcefilename that can lead to unknown...

express 安全漏洞

express is expressjs open source a fast, unconstrained, minimalist web framework for Node.js. A security vulnerability exists in express version 0.x and earlier versions, which stems from improper handling of extra parameters...

CVE-2022-38206

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote remote, unauthenticated attacker to create a crafted link which when clicked could execute arbitrary JavaScript code in the victim’s browser...

Esri Portal For ArcGIS 跨站脚本漏洞

Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A cross-site scripting vulnerability exists in Esri Portal for ArcGIS 10.9.1 and prior...

H3C Firewall 安全漏洞

H3C Firewall is a series of firewalls from China's Xinhua San H3C. A security vulnerability exists in H3C Firewall 3.10 ESS6703 and prior versions, which originates from an attacker who can achieve privilege bypass...

Rdiffweb 授权问题漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your files through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.5.5, which stems from an authentication bypass that can be performed via...

Intelbras 120AC 操作系统命令注入漏洞

The Intelbras 120AC is a wireless router from Intelbras. A security vulnerability exists in versions prior to Intelbras 120AC 1-1-220826 that originates from an authenticated attacker who can implement command injection...

Brave 安全漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in Brave Browser versions prior to 1.42.51, which originated from a vulnerability that could allow a remote attacker to cause a denial of service via a crafted HTML file that references an IPFS scheme...

CVE-2022-45417

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private...

Collective 跨站脚本漏洞

Collective is an open source Plone plugin shared code base by Collective. A security vulnerability exists in Collective collective.contact.widget 1.12 and earlier versions, which stems from a title function in its src/collective/contact/widget/widgets.py file that allows attackers to implement...

CVE-2022-46422

An issue in Netgear WNR2000 v1 1.2.3.7 and earlier allows authenticated attackers to cause a Denial of Service DoS via uploading a crafted firmware image during the firmware update process...

TP-LINK TL-WA7510N 安全漏洞

The TP-LINK TL-WA7510N is an outdoor wireless access point from China P&L TP-LINK. A security vulnerability exists in the TP-Link TL-WA7510N v1 firmware v3.12.6 and earlier versions, which originates from an attacker who can achieve arbitrary code execution or denial of service by uploading a...

Joget 跨站脚本漏洞

Joget is an open source no-code/low-code application platform from Joget Open Source. For faster and simpler digital conversion DX. A cross-site scripting vulnerability exists in Joget version 7.0.32 and prior versions. An attacker exploited the vulnerability to perform a cross-site scripting...

PT-2022-27618 · Atlassian +3 · Bitbucket Server +5

Name of the Vulnerable Software and Affected Versions: Jettison versions prior to 1.5.2 Bitbucket Data Center and Server versions 7.17.0 through 8.12.0 Description: A stack overflow in Jettison allows attackers to cause a Denial of Service DoS via crafted JSON data. This issue has a high impact o...