The vulnerability of the protection mechanism for detecting and responding to security threats at FortiEDR endpoints arises from improper release of resources, allowing attackers to trigger service interruptions.

The vulnerability of the security protection mechanism, as well as its ability to detect and respond to security threats at end points of FortiEDR, is related to the improper release of resources. Exploiting this vulnerability can allow attackers to cause service failures...

Isode M-Link 安全漏洞

Isode M-Link is an Isode core instant messaging and status server based on the XMPP Extensible Messaging and Status Protocol standard from Isode UK. A security vulnerability exists in Isode M-Link versions R16.2v1 through R17.0v23, which stems from a vulnerability that allows unmanaged users to...

CVE-2022-47634

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867...

CVE-2022-47634

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867...

UBUNTU-CVE-2022-42260

NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized user in the guest VM can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data...

PT-2022-28106 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue concerns the incorrect use of privileged APIs in the usememos/memos GitHub repository. A user can archive any private memos, delete any shortcut, and edit any shortcut from other...

dash-live 跨站脚本漏洞

dash-live is a library by Alex Ashley, a personal developer. Fake DASH Live profile endpoints using static assets. A cross-site scripting vulnerability exists in dash-live, which stems from a ready function in the static/js/media.js file of its DOM Node Handler component that allows an attacker t...

PT-2022-27076 · Unknown · Simmeth Lieferantenmanager

Name of the Vulnerable Software and Affected Versions: Simmeth Lieferantenmanager versions prior to 5.6 Description: An issue was discovered where an attacker can make various API calls without authentication because the password in a Credential Object is not checked. This allows unauthorized...

CVE-2022-4604

A vulnerability classified as problematic was found in wp-english-wp-admin Plugin up to 1.5.1. Affected by this vulnerability is the function registerendpoints of the file english-wp-admin.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. Upgrading to...

PT-2022-27719 · WordPress · Wp-English-Wp-Admin

Name of the Vulnerable Software and Affected Versions: wp-english-wp-admin Plugin versions prior to 1.5.2 Description: A vulnerability was found in the wp-english-wp-admin Plugin, affecting the register endpoints function of the file english-wp-admin.php. This issue leads to cross-site request...

wp-english-wp-admin 跨站请求伪造漏洞

wp-english-wp-admin is a WordPress plugin by Stanislav Khromov personal developer. It allows users to change the admin language to English. A cross-site request forgery vulnerability exists in versions prior to wp-english-wp-admin 1.5.3, which stems from an issue with the function registerendpoin...

CVE-2022-41274

SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can lead to the exposure of data like financial reports...

CVE-2022-41274

SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can lead to the exposure of data like financial reports...

CVE-2022-41274

SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can lead to the exposure of data like financial reports...

CVE-2022-41274

SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can lead to the exposure of data like financial reports...

CVE-2022-41274

CVE-2022-41274 affects SAP Disclosure Management, version 10.1. An authenticated attacker can access misconfigured application endpoints that are exposed over the network, enabling disclosure of sensitive data such as financial reports. The underlying issue appears to be authorization/configurati...

SAP Disclosure Management 信息泄露漏洞

SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. An information disclosure vulnerability exists in SAP Disclosure Management version 10.1...

PT-2022-24711

Name of the Vulnerable Software and Affected Versions Clerk WordPress plugin versions prior to 4.0.0 Description The issue affects the validation function for all API requests, making it vulnerable to time-based attacks due to the usage of comparison operators to verify API keys against the ones...

PT-2022-26342 · Nvidia +1 · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU Display Driver for Linux guest affected versions not specified Description: The issue is related to a vulnerability in a D-Bus configuration file. An unauthorized user in the guest VM can impact protected D-Bus endpoints,...

Atlassian Crowd 3.x / 4.x < 4.4.4 / 5.x < 5.0.3 Security Bypass (CWD-5888)

The version of Atlassian Crowd installed on the remote host is 3.x, 4.x prior to 4.4.4, or 5.x prior to 5.0.3. It is, therefore, affected by a security bypass vulnerability due to security misconfiguration. An unauthenticated, remote attacker can exploit this by authenticating as the crowd...