Microsoft Windows Container Manager Service 安全漏洞

Microsoft Windows Container Manager Service is an application from Microsoft USA. It provides a function to manage windows containers. A security vulnerability exists in Microsoft Windows Container Manager Service. The following products and versions are affected:Windows 10 Version 1809 for 32-bi...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

Microsoft Lightweight Directory Access Protocol 代码注入漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft that runs on a layer above the TCP/IP stack. A code injection vulnerability exists in Microsoft Lightweight Directory Access Protocol and affects the following products and versions: Windows 10...

CVE-2021-41663

A cross-site scripting XSS vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php page...

PT-2022-13037 · WordPress · Mitsol Social Post Feed

Name of the Vulnerable Software and Affected Versions: Mitsol Social Post Feed WordPress plugin versions prior to 1.11 Description: The issue allows high privilege users, such as admins, to perform cross-Site Scripting attacks. This is possible because some settings are not properly escaped befor...

java-11-openj9,java-1_8_0-openj9: unverified methods can be invoked using MethodHandles

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles...

CVE-2017-20017

A vulnerability, which was classified as critical, has been found in The Next Generation of Genealogy Sitebuilding up to 11.1.0. This issue affects some unknown processing of the file /timeline2.php. The manipulation of the argument primaryID leads to sql injection. The attack may be initiated...

The Next Generation of Genealogy Sitebuilding SQL注入漏洞

The Next Generation of Genealogy Sitebuilding is a genealogy software in a web server.The Next Generation of Genealogy Sitebuilding version 11.1.0 and earlier versions are vulnerable to SQL injection, which can be exploited by attackers to parameter primaryID to cause SQL injection...

Redmi Note 11 和 Redmi Note 9T 缓冲区错误漏洞

Xiaomi Redmi Note 11 and Redmi Note 9T are both smartphones from Chinese company Xiaomi. The Redmi Note 11 and Redmi Note 9T suffer from a security vulnerability that stems from a stack overflow. An attacker can exploit the vulnerability to conduct a denial of service attack...

IBM InfoSphere Information Server SQL注入漏洞

IBMInfoSphere InformationServer is a data integration software platform that helps organizations derive more value from complex and heterogeneous information scattered across systems.IBM InfoSphere Information Server version 11.7 is vulnerable to SQL injection. An attacker could exploit the...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. A security vulnerability exists in the Framework in Google Android versions prior to 10, 11, 12, and 12L. There is no information about this vulnerability yet, please stay tuned to CNNVD or the vendor's announcement...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from the U.S. company Google. A security vulnerability exists in Google Android 10, 11, 12, 12L and previous versions, which can be exploited by an attacker to elevate local privileges...

CVE-2022-29767

adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a Denial of Service DoS via high CPU usage due to a large number of connections...

CVE-2022-23237

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

CVE-2022-23236

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users...

Owl Labs Meeting Owl 访问控制错误漏洞

Owl Labs Meeting Owl is a video conferencing device from Owl Labs, Inc. Featuring a series of cameras and microphones that capture 360-degree video and audio and automatically focus on the speaker, making meetings more dynamic and inclusive, Owl Labs Meeting Owl version 5.2.0.15 is vulnerable to ...

Vulnerabilities fixed in Trend Micro Apex One

Vulnerabilities have been fixed in Trend Micro Apex One. A malicious party could potentially exploit the vulnerability to increase its permissions and thereby load untrusted files. load. Trend Micro has released updates to fix the vulnerabilities fixes in Apex One. For more information, see:...

CVE-2022-1907

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11...

UBUNTU-CVE-2022-1907

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11...

protobuf.js 安全漏洞

protobuf.js is a pure JavaScript implementation of protobufjs with a protocol buffer implementation for node.js and browser TypeScript support. It is easy to use, extremely fast, and works out-of-the-box with .proto files! A security vulnerability exists in protobuf.js versions prior to 6.11.3. A...