The vulnerability of the leaf_hdr_load_raw() function in the internal/dcraw_common.cpp component of the LibRaw image processing library allows a hacker to cause a service failure.

The vulnerability of the leafhdrloadraw function in the internal/dcrawcommon.cpp component of the LibRaw image processing library is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Nikon_coolscan_load_raw() function in the internal/dcraw_common.cpp component of the LibRaw image processing library, which allows a hacker to trigger a service failure.

The vulnerability of the nikoncoolscanloadraw function in the internal/dcrawcommon.cpp component of the LibRaw image processing library is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...

PT-2022-27074 · Unknown +2 · Clickhouse +1

Name of the Vulnerable Software and Affected Versions: ClickHouse versions prior to 22.9.1.2603 ClickHouse versions prior to 22.8.2.11 ClickHouse versions prior to 22.7.4.16 ClickHouse versions prior to 22.6.6.16 ClickHouse versions prior to 22.3.12.19 Description: An issue was discovered in...

Ruby on Rails: Unexpected deserialization in Kredis

Unexpected classes could be deserialized in Kredis due to the use of JSON.load, potentially leading to security vulnerabilities...

GSD-2022-1005260 usb: cdns3: fix random warning message when driver load

usb: cdns3: fix random warning message when driver load This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

CVE-2022-37734

graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9...

PT-2022-37273 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash occurs in the HashMgr class, specifically in the add...

Mz Automation Libiec61850 安全漏洞

Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. A security vulnerability exists in Mz Automation Libiec61850 that stems from its use of incompatible types to access resources, which could allow an attacker to crash the server using a malicious lo...

The vulnerability of the Device Software Manager installer, related to an uncontrolled search path, allows a hacker to load arbitrary files.

The vulnerability of the Device Software Manager installer is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to load arbitrary files...

CVE-2022-2943

The WordPress Infinite Scroll – Ajax Load More plugin for Wordpress is vulnerable to arbitrary file reading in versions up to, and including, 5.5.3 due to insufficient file path validation on the almrepeatersexport function. This makes it possible for authenticated attackers, with administrative...

CVE-2022-2939

The WP Cerber Security plugin for WordPress is vulnerable to security protection bypass in versions up to, and including 9.0, that makes user enumeration possible. This is due to improper validation on the value supplied through the 'author' parameter found in the /cerber-load.php file. In...

CVE-2022-2945

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 5.5.3 via the 'type' parameter found in the almgetlayout function. This makes it possible for authenticated attackers, with administrative permissions, to rea...

CVE-2022-2433

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input via the 'almrepeatersexport' parameter in versions up to, and including 5.5.3. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they...

Deserialization of untrusted data

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input via the 'almrepeatersexport' parameter in versions up to, and including 5.5.3. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they...

CVE-2022-2945

CVE-2022-2945 affects WordPress Ajax Load More (Infinite Scroll) plugin up to version 5.5.3. The vulnerability is a directory-traversal flaw exploitable via the type parameter in the alm_get_layout() function, allowing an authenticated administrator to read arbitrary server files containing sensi...

CVE-2022-2433 WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input via the 'almrepeatersexport' parameter in versions up to, and including 5.5.3. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they...

CVE-2022-2433

The CVE in question affects the WordPress plugin WordPress Infinite Scroll – Ajax Load More (up to and including version 5.5.3). The root cause is deserialization of untrusted input via the alm_repeaters_export parameter, which can be exploited by unauthenticated users after the site admin perfor...

CVE-2022-2433 WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input via the 'almrepeatersexport' parameter in versions up to, and including 5.5.3. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they...

PT-2022-16612 · WordPress · Wordpress Infinite Scroll – Ajax Load More

Name of the Vulnerable Software and Affected Versions: WordPress Infinite Scroll – Ajax Load More plugin versions up to, and including 5.5.3 Description: The issue allows deserialization of untrusted input via the alm repeaters export parameter. This enables unauthenticated users to potentially...

PT-2022-19570 · WordPress · Wp Cerber Security

Name of the Vulnerable Software and Affected Versions: WP Cerber Security plugin for WordPress versions up to, and including 9.0 Description: The WP Cerber Security plugin for WordPress is vulnerable to security protection bypass, making user enumeration possible. This is due to improper validati...