4341 matches found
WordPress plugin MC4WP跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress MC4WP plugin 4.8.6 and earlier versions have a cross-site scripting vulnerability that can ...
多款Cisco产品日志信息泄露漏洞
Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS are both products of Cisco, Inc.Cisco Expressway Series is software for accessing devices outside the firewall. The software provides simple, highly secure access for users outside the firewall, helping telecommuters wo...
TIBCO BusinessConnect Trading Community Management 跨站请求伪造漏洞
Tibco TIBCO BusinessConnect Trading Community Management is a trading community management from Tibco USA. A cross-site request forgery vulnerability exists in TIBCO BusinessConnect Trading Community Management 6.1.0 and prior versions, which can be exploited by an unauthenticated attacker with...
PT-2022-20427 · Jenkins · Jenkins Autocomplete Parameter Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Autocomplete Parameter Plugin versions 1.1 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the plugin references certain parameter names in an unsafe manner from...
Jenkins Multiselect parameter Plugin 跨站脚本漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plug-ins to support building, deploying, and automating any project. Jenkins Multiselect parameter Plugin 1.3 and earlier versions have a cross-si...
Jenkins Git Plugin 信息泄露漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An information disclosure vulnerability...
GHSA-RC2R-W8JV-VGGP Cloud Foundry vulnerable to Improper Certificate Validation
Pivotal Cloud Foundry 239 and earlier, UAA aka User Account and Authentication Server 3.4.1 and earlier, UAA release 12.2 and earlier, PCF aka Pivotal Cloud Foundry Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not validate if a certificate is expired...
GHSA-742J-JCFR-23W3 Insufficient Session Expiration in Jenkins
Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject existing remoting-based...
GHSA-RGMJ-MCCJ-H9MX Cross-Site Request Forgery in Jenkins
A server-side request forgery vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in ZipExtractionInstaller.java that allows users with Overall/Read permission to have Jenkins submit a HTTP GET request to an arbitrary URL and learn whether the response is successful 200 or not...
CVE-2022-30062
ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...
CVE-2022-28242
Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...
CVE-2022-27801 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...
ftcms 安全漏洞
ftcms is a content management system from ftcms Inc. A security vulnerability exists in ftcms version 2.1 and earlier versions, which can be exploited by attackers to execute arbitrary code...
ftcms 路径遍历漏洞
ftcms is a content management system from ftcms Inc. A security vulnerability exists in ftcms version 2.1 and earlier versions, which can be exploited by an attacker to read arbitrary files via tp.php...
ftcms 路径遍历漏洞
ftcms is a content management system from ftcms. A security vulnerability exists in ftcms version 2.1 and earlier versions, which can be exploited by an attacker to conduct a directory traversal attack via the tp parameter...
CVE-2022-30235
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized access when an attacker uses brute force. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior...
PT-2022-8045 · Admesh +2 · Admesh +2
Name of the Vulnerable Software and Affected Versions: ADMesh versions 0.98.4 and earlier Description: The issue is a heap-based buffer over-read in the stl update connects remove 1 function, which is called from stl remove degenerate, located in connect.c in libadmesh.a. This function is part of...
ALPINE-CVE-2022-20771
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allo...
CVE-2021-20051
SonicWall Global VPN Client 4.10.7.1117 installer 32-bit and 64-bit and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system...