Moodle 安全漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from the absence of group filtering in H5P activity attempt reports, where...

Moodle 安全漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle, which poses a remote code execution risk when restoring an incorrectly formatted backup file...

PT-2022-16204 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x: 6.10.6 and below Aruba ClearPass Policy Manager versions 6.9.x: 6.9.11 and below Description: The web-based management interface of ClearPass Policy Manager has vulnerabilities that could allow ...

PT-2022-24125 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.6 and below Aruba ClearPass Policy Manager versions 6.9.11 and below Description: A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated...

PT-2022-16195 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.6 and below Aruba ClearPass Policy Manager versions 6.9.11 and below Description: A vulnerability in the ClearPass Policy Manager web-based management interface exists, which exposes some endpoints...

PT-2022-24123 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x through 6.10.6 Aruba ClearPass Policy Manager versions 6.9.x through 6.9.11 Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated...

Aruba Networks ClearPass Policy Manager SQL注入漏洞

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager versions 6.10.x through 6.10.6 and 6.9.x through 6.9.11. An attacker could...

CVE-2022-40980

A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with access to the Management Server to delete files. This issue was resolved in 9.8 SP5 Critical Patch 2...

PT-2022-20737 · WordPress · Nex-Forms

Name of the Vulnerable Software and Affected Versions: NEX-Forms WordPress plugin versions prior to 7.9.7 Description: The issue arises from the plugin's failure to properly sanitise and escape user input before using it in SQL statements, leading to SQL injections. This can be exploited by anyon...

AZL-10979 CVE-2022-3235 affecting package vim for versions less than 9.0.0490-1

Use After Free in GitHub repository vim/vim prior to 9.0.0490...

PT-2022-34140 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.35 through 5.10.136 Description: The issue is related to a use-after-free in the ath9k hif usb rx cb function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

CVE-2022-38992

creationtimestamp| type| source ---|---|--- 2022-09-16 22:35:05+00:00| seen| https://t.me/cibsecurity/49965...

CVE-2022-40149

creationtimestamp| type| source ---|---|--- 2022-09-16 14:38:41+00:00| seen| https://t.me/cibsecurity/49897...

CVE-2022-36536

An issue in the component postapplogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below allows attackers to escalate privileges via creating crafted session tokens...

CVE-2022-36534

Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain multiple remote code execution RCE vulnerabilities via the JobExecuteBefore and JobExecuteAfter parameters at postprofilesettings.php...

WordPress plugin Affiliates Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

WordPress plugin Affiliates Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogging sites on PHP and MySQL servers. A security vulnerability exists in the WordPres...

Syncovery 安全特征问题漏洞

Syncovery is a superbly versatile synchronization, copy, move, and backup tool from Syncovery Germany. A security vulnerability exists in Syncovery 9 for Linux prior to v9.48j, which stems from session tokens being generated in an insecure manner and can be exploited by an attacker to easily...

CrushFTP 跨站脚本漏洞

CrushFTP is a file transfer server. A security vulnerability exists in CrushFTP version 9, which can be exploited by an attacker to execute stored cross-site scripting XSS by accessing the administration panel...

CVE-2022-1602

A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 SP8. The security vulnerability in SP8 is not remedied after upgrading from SP8 to Service Pack 9 SP9. HP has released Service Pack 10 SP10 to remediate the potential vulnerability introduced in SP8...