SUSE CVE-2022-21537

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

SUSE CVE-2022-21538

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

SUSE CVE-2022-23943

Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions...

SUSE CVE-2022-27386

MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sqlclass.cc...

SUSE CVE-2022-31736

A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

PT-2023-14218 · Unknown · Orchestrated Corona Virus (Covid-19) Banner & Live Data

Name of the Vulnerable Software and Affected Versions: Orchestrated Corona Virus COVID-19 Banner & Live Data plugin versions 1.7.0.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into...

Ruckus Wireless SmartZone 代码注入漏洞

The Ruckus Wireless SmartZone is a high performance WLAN controller from Ruckus. A security vulnerability exists in Ruckus Wireless Admin 10.4 and prior versions that originates from allowing remote code execution via an unauthenticated HTTP GET request...

Input validation

Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service...

Dell SupportAssist for Home PCs 代码问题漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A security vulnerability exists in Dell SupportAssist for Home PCs version 3.11.4 and prior versions, which...

ChurchCRM SQL注入漏洞

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM v4.5.3 and earlier versions that stems from the presence of a SQL injection vulnerability via the Event parameter...

CVE-2023-25396

Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate system files...

WordPress plugin Afterpay Gateway for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2023-12313 · Teradek · Bond Pro +2

Name of the Vulnerable Software and Affected Versions: Teradek Bond, Bond 2 and Bond Pro versions 7.3.x and earlier Description: A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. The vendor states that the...

Teradek Cube 跨站脚本漏洞

Teradek Cube is a video decoder from Teradek. A security vulnerability exists in Teradek Cube version 7.3.x and prior versions. An attacker could exploit the vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

Delta Electronics DIAScreen 安全漏洞

Delta Electronics DIAScreen is a smartphone builder from Delta Electronics, a Taiwan, China-based company. A security vulnerability exists in Delta Electronics DIAScreen version 1.2.1.23 and prior versions, which originates from a vulnerability that is easily exploited by the...

LIVEBOX Collaboration vDesk 安全漏洞

LIVEBOX Collaboration vDesk is an application from LIVEBOX, Inc. A security vulnerability exists in LIVEBOX Collaboration vDesk prior to version v018, which stems from an authorization logic flaw that can be exploited by an attacker to perform a privilege escalation to the administrator role and...

CVE-2023-22333

Cross-site scripting vulnerability in EasyMail 2.00.130 and earlier allows a remote unauthenticated attacker to inject an arbitrary script...

NYUCCL psiTurk 代码注入漏洞

NYUCCL psiTurk is a scientific open platform on Amazon Mechanical Turk. A security vulnerability exists in NYUCCL psiTurk version 3.2.0 and prior versions, which stems from an incorrect manipulation of the parameter mode that can lead to invalidation of special elements used in the template engin...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

Dreamer CMS 跨站脚本漏洞

Dreamer CMS is a Dreamer Content Management System by the individual developer Junnan Wang in China. A cross-site scripting vulnerability exists in isoftforce Dreamer CMS version 4.0.1 and earlier versions. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...