CVE-2022-45755

Cross-site scripting XSS vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic information page...

Cross site scripting

Cross-site scripting XSS vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic information page...

CVE-2022-45755

Cross-site scripting XSS vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic information page...

PT-2023-3181 · Western Digital +1 · Western Digital My Cloud Os 5 +2

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud Home versions prior to 9.4.0-191 Western Digital My Cloud Home Duo versions prior to 9.4.0-191 SanDisk ibi versions prior to 9.4.0-191 Western Digital My Cloud OS 5 versions prior to 5.26.202 Description: A Path...

CVE-2023-23944

Nextcloud Mail app (for Nextcloud server) stored user passwords in cleartext in the database during the OAuth2 setup procedure in versions prior to 2.2.2. An attacker with database access could read these passwords until OAuth setup completes. Remediation: upgrade the Nextcloud Mail app to versio...

CVE-2023-23082

A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument...

Kodi Home Theater Software 缓冲区错误漏洞

Kodi Home Theater Software is an award-winning free and open source GPL software media player and digital media entertainment center from the individual developer Peter Frühberger. A security vulnerability exists in Kodi Home Theater Software version 19.5 that originates from a denial of service...

CVE-2023-23082

CVE-2023-23082 concerns a heap buffer overflow in Kodi up to version 19.5, caused by an improper length of the value passed to the offset argument. Public context in connected docs indicates Debian LTS advisories (DLA-4423-1 for Debian 11) and Nessus entries referencing a Kodi vulnerability with ...

CVE-2023-23082

A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument...

CVE-2023-24574

Dell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an "Uncontrolled Resource Consumption vulnerability" in authentication component. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to uncontrolled resource consumption by creating permanent home...

Cross-site Request Forgery (CSRF)

Overview clockworkweb is a web interface for Clockwork Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the homecontroller.rb class. Remediation Upgrade clockworkweb to version 0.1.2 or higher. References - GitHub Commit - GitHub Issue...

Dell Enterprise SONiC OS 资源管理错误漏洞

Dell Enterprise SONiC OS Dell Enterprise Sonic Operating System is an open-source network operating system from Dell, USA. A resource management error vulnerability exists in Dell Enterprise SONiC OS, versions 3.5.3, 4.0.0, 4.0.1, and 4.0.2, which stems from a security issue contained in the...

dst-admin 命令注入漏洞

dst-admin is a web program written in Java by qinming99, an individual developer. A command injection vulnerability exists in dst-admin version 1.5.0, which stems from an unknown function in the file /home/sendBroadcast that can be injected via the parameter message...

PT-2023-16426 · Dst-Admin · Dst-Admin

Name of the Vulnerable Software and Affected Versions: dst-admin version 1.5.0 Description: A critical issue has been found, affecting unknown code in the file /home/sendBroadcast. The manipulation of the message argument leads to command injection. This issue can be exploited remotely...

PT-2023-16425 · Dst-Admin · Dst-Admin

Name of the Vulnerable Software and Affected Versions: dst-admin version 1.5.0 Description: A critical issue was found in dst-admin, affecting an unknown part of the file /home/masterConsole. The manipulation of the command argument leads to command injection. It is possible to initiate the attac...

dst-admin 命令注入漏洞

dst-admin is a web program written in Java by qinming99, an individual developer. A command injection vulnerability exists in dst-admin version 1.5.0, which stems from an unknown function in the file home/masterConsole, which can be injected with the parameter command...

Security Advisory - Incorrect Privilege Assignment Vulnerability in Huawei Whole-Home Intelligence Software

A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions. Vulnerability ID:HWPSIRT-2022-90086 This vulnerability has been assigned a CVE ID:...

Security Advisory - Incorrect Privilege Assignment Vulnerability in Huawei Whole-Home Intelligence Software

A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions.Vulnerability ID:HWPSIRT-2022-52968 This vulnerability has been assigned a CVE ID: CVE-2022-48...

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.

...

CVE-2023-24040

dtprintinfo in Common Desktop Environment 1.6 has a bug in the parser of lpstat an invoked external command during listing of the names of available printers. This allows low-privileged local users to inject arbitrary printer names via the $HOME/.printers file. This injection allows those users t...