DEBIAN-CVE-2022-1942

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

DEBIAN-CVE-2022-1927

Buffer Over-read in GitHub repository vim/vim prior to 8.2...

CVE-2022-1898

Use After Free in GitHub repository vim/vim prior to 8.2...

ALPINE-CVE-2022-1886

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

GHSA-X33G-375J-JHF7 Mattermost Server has Improper Authorization for Integration Requests

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. API endpoint access control does not honor an integration permission restriction...

CVE-2022-0407

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-0318

Heap-based Buffer Overflow in vim/vim prior to 8.2...

CVE-2021-40281

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dlprint.php when registering ordinary users...

WordPress SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin SEO Redirection prior to version 8.2. T...

Unlimited Sitemap Generator vulnerable to cross-site request forgery

Overview Unlimited Sitemap Generator provided by XML-Sitemaps contains a cross-site request forgery vulnerability CWE-352. Kanta Nishitani of Ierae Security, Inc reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impa...

Intel Ethernet controllers 安全漏洞

Intel Ethernet Controllers is an Ethernet controller from Intel Corporation USA. A security vulnerability exists in Intel Ethernet controllers, which stems from an out-of-bounds write in the IntelR Ethernet 700 firmware to a series of controllers prior to version 8.2 that could allow a privileged...

Emtec ZOC 安全漏洞

Emtec ZOC is a professional ssh, telnet and serial terminal emulator for Emtec applications. A security vulnerability exists in EmTec ZOC versions prior to 8.02.2. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's bulletin...

DEBIAN-CVE-2021-32773

Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...

js-stellar-sdk 数据伪造问题漏洞

js-stellar-sdk is an application. A Javascript library for communicating with the Stellar Horizon server. A security vulnerability exists in Js-stellar-sdk versions prior to 8.2.3, which stems from the program's "Utils.readChallengeTx" function not verifying that the server has signed the...

CVE-2021-20100

Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20099...

Hotfix XS82E020 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| Restart the XAPI Toolstack Content live patchable| No Baselines for Live Patch| N/A Revision History|...

Aruba Networks AirWave Management Platform 代码问题漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management. An XML external entity injection vulnerability exists in Aruba Networks AirWave Management Platform versions prior to 8.2.12.1, which can be exploited by a remote attacker to submit a...

PT-2021-4624 · Pillow +9 · Pillow +9

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 8.2.0 Description: The issue is related to the readline implementation in the EPSImageFile component of the Pillow library. It uses a quadratic method to accumulate lines while searching for a line ending, which can b...

CVE-2021-2110

Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications component: Letters. The supported version that is affected is 8.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety. While the...

QSC Q-SYS Core Manager Path Traversal Vulnerability

QSC Q-SYS is a signal processing device from QSC. The device is used for audio information processing and information exchange, and can be used in conference, teacher, lecture hall and other multi-person meeting scenarios. A path traversal vulnerability exists in QSC Q-SYS Core Manager 8.2.1, whi...