13267 matches found
ImageMagick code issue vulnerability (CNVD-2022-18008)
Imagemagick Studio ImageMagick is a set of open source image processing software from the American company ImageMagick Studio Imagemagick Studio. The software can read, convert, or write images in a variety of formats.ImageMagick has a security vulnerability that stems from a null pointer...
The vulnerability of the Windows Common Log File System Driver in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Common Log File System Driver in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...
Business Logic Errors
Description Product status of product is unpublished has been deleted by admin in Trash folder but user can still add to cart and make purchases Proof of Concept Step 1: Admin go to Shop Products: Unpublish product and Delete product Step 2: User add product to cart by request POST...
PT-2022-37947
Уязвимость функции sec aead soft crypto модуля drivers/crypto/hisilicon/sec2/sec crypto.c драйвера криптографического ускорителя ядра операционной системы Linux связана с ошибками обработки памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
EulerOS 2.0 SP3 : kernel (EulerOS-SA-2022-1171)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the nl80211policy policy of nl80211.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local...
python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c
A flaw was found in python-pillow. The vulnerability occurs due to improper initialization of image paths, leading to a buffer over-read and improper initialization. This flaw allows an attacker to unauthorized memory access that causes memory access errors, incorrect results, or crashes...
node-request-retry 信息泄露漏洞
node-request-retry is a method of automatically retrying a request when a connection fails with an ECONNRESET, ENOTFOUND, ESOCKETTIMEDOUT, ETIMEDOUT, ECONNREFUSED, EHOSTUNREACH, one of EPIPE, EAIAGAIN, or when an HTTP 5xx or 429 errors, the request will be automatically retried, as these are...
Istio 授权问题漏洞
Istio is an open platform for connecting, managing and securing microservices. Istio suffers from an authorization issue vulnerability that stems from the Istio control plane "istiod" being susceptible to request processing errors in the affected version. An attacker could use this vulnerability ...
The vulnerability of Wi-Fi router microprogramming software web applications of D-Link DIR-X1860 allows a intruder to trigger a service failure.
The vulnerability of the web-based application of D-Link DIR-X1860 wireless routers is related to resource release errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created web page...
The vulnerability of the Mozilla Firefox browser, related to errors in processing HTML content, allows a hacker to execute arbitrary code.
The vulnerability of the Mozilla Firefox browser is related to errors in processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...
The vulnerability of the universal monitoring system Zabbix, related to authentication errors, allows a intruder to execute arbitrary code with root privileges.
The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with root privileges...
ROS-20220217-01
MariaDB database management system vulnerability, related to a formatted string error in the in the implementation of the CONNECT function. Exploitation of the vulnerability could allow an attacker acting remotely, send a specially crafted SQL query containing format string specifiers and execute...
Business Logic Errors
microweber/microweber is vulnerable to business logic errors. Lack of secure validation of sessionid for usermanager in the function removeitem causes business logic errors...
CVE-2022-0688
Business Logic Errors in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0688
Business Logic Errors in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0688 Business Logic Errors in microweber/microweber
Business Logic Errors in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0688
CVE-2022-0688 affects microweber/microweber prior to 1.2.11. The Red Hat OSV/GHSA entries and related records describe a business logic/ insecure direct object reference issue in Microweber that can enable a malicious actor to manipulate cart contents (e.g., removing items) without proper authori...
CVE-2022-0688
Business Logic Errors in Packagist microweber/microweber prior to 1.2.11...
