9652 matches found
PT-2022-7321 · Xenstore +1 · Xenstore +1
Name of the Vulnerable Software and Affected Versions: Xenstore affected versions not specified Description: The issue is related to the uncontrolled allocation of resources in Xenstore, which can lead to a Denial of Service DoS of xenstored. Malicious guests can cause xenstored to allocate large...
PT-2022-7330 · Xenstore +1 · Xenstore +1
Name of the Vulnerable Software and Affected Versions: Xenstore affected versions not specified Description: The issue is related to the uncontrolled allocation of resources in Xenstore, which can lead to a Denial of Service DoS of xenstored. Malicious guests can cause xenstored to allocate large...
PT-2022-7331 · Xen +1 · Xenstore +1
Name of the Vulnerable Software and Affected Versions: Xenstore affected versions not specified Description: The issue is related to uncontrolled resource allocation in the Xenstore storage of the Xen hypervisor. Exploitation can lead to a denial of service DoS of xenstored. Malicious guests can...
CVE-2022-39020 Cross-site scripting in Schoolbox version 21.0.2, by Schoolbox Pty Ltd
Multiple instances of XSS stored and reflected was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting...
Schoolbox 跨站脚本漏洞
Schoolbox is an online learning platform from Schoolbox Australia. A security vulnerability exists in Schoolbox version 21.0.2, which stems from its student assessment submission, file upload, news, ePortfolio, and calendar event creation features that allow an attacker to implement multiple...
PT-2022-24676 · Schoolbox Pty +1 · Schoolbox
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The application is affected by multiple instances of cross-site scripting XSS, including both stored and reflected XSS. Vulnerable features include student assessment submission, file...
Design/Logic Flaw
An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service could open a connection, causing the service to fault and become unavailable. The affected port could be used as a server ping port and uses messages structured with XML...
CVE-2022-38744 FactoryTalk Alarm and Events Server Vulnerable to Denial-Of-Service Attack
An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service could open a connection, causing the service to fault and become unavailable. The affected port could be used as a server ping port and uses messages structured with XML...
CVE-2022-38744
CVE-2022-38744 affects Rockwell Automation FactoryTalk Alarm and Events Server. It exploits improper access control to allow an unauthenticated remote attacker with network access to open a connection, fault the service, and render the server unavailable. Affected component is the FactoryTalk Ala...
CVE-2022-32946
creationtimestamp| type| source ---|---|--- 2022-10-27 13:18:14+00:00| seen| https://t.me/codebysec/6761 2022-10-27 15:40:05+00:00| seen| https://t.me/truesecator/3627 2022-10-28 19:30:15+00:00| seen| https://t.me/SecLabNews/12909 2022-10-29 13:11:27+00:00| seen| https://t.me/kharchevnikov/3470...
PT-2022-6730 · Cisco · Cisco Webex Meetings
Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings affected versions not specified Description: The issue is related to insufficient validation of user-supplied input in Webex Events classic programs, email templates, and survey questions, allowing an authenticated, remot...
Rockwell Automation FactoryTalk Alarm and Events Server 授权问题漏洞
The Rockwell Automation FactoryTalk Alarm and Events Server from Rockwell Automation provides a means of connecting to Rockwell's FactoryTalk service to filter alarms from configured A&E servers. Alarms. A security vulnerability exists in the Rockwell Automation FactoryTalk Alarm and Events Serve...
CVE-2022-37454
creationtimestamp| type| source ---|---|--- 2022-10-21 07:00:29+00:00| published-proof-of-concept| https://t.me/TopCyberTechNews/184 2022-10-29 14:21:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7069 2023-03-09 07:09:21+00:00| published-proof-of-concept|...
CVE-2018-19052
creationtimestamp| type| source ---|---|--- 2022-10-20 01:22:59+00:00| seen| https://t.me/isendpackets/129 2024-01-07 02:41:34+00:00| seen| https://t.me/arpsyndicate/2605...
CVE-2022-43408
creationtimestamp| type| source ---|---|--- 2022-10-19 20:15:28+00:00| seen| https://t.me/cibsecurity/51804 2025-10-04 07:02:40+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m2dz6qfykut2 2025-10-04 07:13:11+00:00| seen|...
UBUNTU-CVE-2022-2630
An improper access control issue in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.4, all versions from 15.3 before 15.3.2 allows disclosure of confidential information via the Incident timeline events...
CVE-2022-2630
An improper access control issue in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.4, all versions from 15.3 before 15.3.2 allows disclosure of confidential information via the Incident timeline events...
CVE-2022-2630
An improper access control issue in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.4, all versions from 15.3 before 15.3.2 allows disclosure of confidential information via the Incident timeline events...
CVE-2022-3351
An issue has been discovered in GitLab EE affecting all versions starting from 13.7 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. A user's primary email may be disclosed to an attacker through group member events webhooks...
