300 matches found
SUSE CVE-2018-2638
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...
Microsoft Dynamics 跨站脚本漏洞
Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. The following products and...
Splunk 跨站脚本漏洞
Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...
Vim 安全漏洞
Vim is a cross-platform text editor. A security vulnerability exists in versions prior to vim/vim 9.0.1225 that stems from a heap-based buffer overflow...
Severe Security Flaw Found in "jsonwebtoken" Library Used by 22,000+ Projects
UPDATE: CVE-2022-23529 Retracted Following Review Auth0 and Unit 42 said they are formally retracting CVE-2022-23529 CVSS score: 7.6 based on the fact that several prerequisites are essential for exploitation. The cybersecurity company said "important security checks" have been added to fix the...
PT-2022-16062
Name of the Vulnerable Software and Affected Versions jsonwebtoken versions = 8.5.1 Description The jsonwebtoken library can be misconfigured, leading to incorrect verification of tokens. This occurs when a poorly implemented key retrieval function is used, referring to the secretOrPublicKey...
PT-2022-16054 · Npm · Jsonwebtoken
Name of the Vulnerable Software and Affected Versions: jsonwebtoken versions = 8.5.1 Description: A high-severity security flaw has been discovered in the jsonwebtoken library, leading to remote code execution RCE attacks. The issue arises when a malicious actor can modify the key retrieval...
PortlandLabs Concrete CMS 授权问题漏洞
PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. in the United States. A security vulnerability exists in Concrete CMS concrete5 versions prior to 8.5.10 and versions 9.0.0 through 9.1.2, which stems from a new session ID not being issued...
CVE-2022-43564
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user who can create search macros and schedule search reports can cause a denial of service through the use of specially crafted search macros...
SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞
SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...
AZL-10979 CVE-2022-3235 affecting package vim for versions less than 9.0.0490-1
Use After Free in GitHub repository vim/vim prior to 9.0.0490...
72crm SQL注入漏洞
72crm is China 72crm open source based on TP5.0 + ElementUI of a former CRMvueCRM system . 72crm 9.0 version of a security vulnerability , the vulnerability stems from viewing the task calendar in the presence of SQL injection...
Veritas NetBackup 安全漏洞
Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection of environmental data such as metadata and virtual environments. A security vulnerabilit...
CVE-2022-2287
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0...
AZL-10015 CVE-2022-2285 affecting package vim for versions less than 9.0.0050-2
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0...
CVE-2022-2285
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0...
Vim 安全漏洞
Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 9.0 that stems from the presence of a heap-based buffer overflow...
ALPINE-CVE-2022-2264
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...