3345 matches found
USN-5355-1: zlib vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Danilo Ramos discovered that zlib incorrectly handled memory when performing certain deflating operations. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or...
编号撤回
This CVE number has been withdrawn...
Arbitrary Code Injection
Overview typo3/cms is a free open source Content Management Framework. Affected versions of this package are vulnerable to Arbitrary Code Injection via the Color Picker Wizard component. Remediation Upgrade typo3/cms to version 6.1.9, 6.0.14, 4.7.19, 4.5.34 or higher. References - OpenSuse Securi...
编号撤回
This CVE number has been withdrawn...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4j-Exploit-CVE-2021-44228 Log4Shell Vulnerability Test Too...
NI Web Server 跨站脚本漏洞
NI Web Server is a web server from NI China. A security vulnerability exists in NI Web Server. No information about the vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...
CVE-2022-1020
The Product Table for WooCommerce wooproducttable WordPress plugin before 3.1.2 does not have authorisation and CSRF checks in the wptadminupdatenoticeoption AJAX action available to both unauthenticated and authenticated users, as well as does not validate the callback parameter, allowing...
CVE-2022-27423
Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blogid parameter at /blog/blog.php...
Exploit for CVE-2022-24491
CVE-2022-24491 ================================= A Zeek detecto...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 This package detects a subset of CVE-2022-229...
CVE-2022-0271
The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it back via the lpbackgroundsingleemail AJAX action, leading to a Reflected Cross-Site Scripting...
CVE-2022-0271
The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it back via the lpbackgroundsingleemail AJAX action, leading to a Reflected Cross-Site Scripting...
CVE-2022-0271: Improper Neutralization of Input During Web Page Generation
The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it back via the lpbackgroundsingleemail AJAX action, leading to a Reflected Cross-Site Scripting...
CVE-2022-0404
The Material Design for Contact Form 7 WordPress plugin through 2.6.4 does not check authorization or that the option mentioned in the notice param belongs to the plugin when processing requests to the cf7mddismissnotice action, allowing any logged in user with roles as low as Subscriber to set...
CVE-2022-0404
The Material Design for Contact Form 7 WordPress plugin through 2.6.4 does not check authorization or that the option mentioned in the notice param belongs to the plugin when processing requests to the cf7mddismissnotice action, allowing any logged in user with roles as low as Subscriber to set...
PT-2022-13158 · WordPress · Contact Form 7 Material Design
Name of the Vulnerable Software and Affected Versions: Material Design for Contact Form 7 WordPress plugin versions 2.6.4 and earlier Description: The issue allows any logged-in user, even those with low roles such as Subscriber, to set arbitrary options to true due to a lack of authorization...
编号撤回
This CVE number has been withdrawn...