WordPress plugin News Announcement Scroll 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Apache Jena 代码问题漏洞

Apache Jena is the United States Apache Apache Foundation of a Java Semantic Web framework. It is used to build semantic Web and linked data applications. A code issue vulnerability exists in Apache Jena SDB 3.17.0 and earlier versions, which stems from vulnerability to JDBC deserialization attac...

Intel NUC 安全漏洞

Intel NUC is a small minicomputer from Intel U.S. Inc. IntelR NUC 8 Compute Elements CBWHL357.0096 previous versions have an access control error vulnerability, which stems from improper BIOS firmware access control and can be exploited by attackers for local privilege elevation...

Intel XMM 授权问题漏洞

Intel XMM is a family of 4G LTE, LTE Advanced, LTE Advanced Pro and 5G modems from Intel Corporation USA. A security vulnerability exists in versions prior to Intel XMMTM 7560 Modem M27560R01.2146.00 that stems from incorrect authentication. An attacker could exploit the vulnerability to escalate...

Drogon 安全特征问题漏洞

Drogon is an open source HTTP application framework based on C++14/17.Drogon can be used to easily build various types of web application server programs using C++. A security vulnerability exists in Drogon 1.8.1 and earlier versions that stems from an unknown feature of the Session Hash componen...

Wasmtime 缓冲区错误漏洞

Wasmtime, a Bytecode Consortium project, is a standalone wasm-optimized runtime for WebAssembly and WASI only. A security vulnerability exists in versions of Wasmtime prior to 2.0.2, which stems from out-of-bounds reads and writes in its zero-memory page configuration...

Schneider Electric EcoStruxure Operator Terminal Expert SQL注入漏洞

Schneider Electric EcoStruxure Operator Terminal Expert is a touch screen configuration software from Schneider Electric, France. This software support is mainly used to create and edit touch applications. A SQL injection vulnerability exists in Schneider Electric EcoStruxure Operator Terminal...

artemis-commons: Apache ActiveMQ Artemis DoS

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability DoS through uncontrolled resource consumption of memory...

PT-2022-27270 · WordPress · 4Ecps Web Forms

Name of the Vulnerable Software and Affected Versions: 4ECPS Web Forms plugin versions 0.2.17 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. It affects the 4ECPS Web Forms plugin on WordPress...

Apereo CAS 安全漏洞

Apereo CAS is a web-based enterprise multilingual single sign-on solution. A security vulnerability exists in Apereo CAS versions prior to 1.6.0 that stems from allowing PHP applications to easily authenticate users through the Central Authentication Service CAS...

PT-2022-24234 · Delta Electronics · Infrasuite Device Master

Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior Description: The issue concerns the deserialization of user-supplied data provided through the Device-Gateway service port without proper verification. An attacker could...

Apache Linkis 代码问题漏洞

Apache Linkis is a middleware product from the Apache Foundation that establishes an effective connection between upper-tier applications and the underlying data engine. A code issue vulnerability exists in Apache Linkis version 1.2.0 and prior versions, which stems from a deserialization...

ERP Sankhya 跨站脚本漏洞

ERP Sankhya is a web-based enterprise resource planning ERP software from Sankhya. A cross-site scripting vulnerability exists in ERP Sankhya 4.13.x and prior versions that stems from the presence of cross-site scripting...

Delta Electronics InfraSuite Device Master 代码问题漏洞

Delta Electronics InfraSuite Device Master is a device used to simplify and automate the monitoring of critical equipment from Delta Electronics Taiwan, China. A code issue vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.01a and prior versions, which stems from a lack of...

mysql: Server: Security: Encryption unspecified vulnerability (CPU Jul 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

mysql: InnoDB unspecified vulnerability (CPU Jan 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of...

mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Jan 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

mysql: Server: Replication unspecified vulnerability (CPU Apr 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...