6540 matches found
CVE-2022-39379 affecting package rubygem-fluentd for versions less than 1.14.6-2
CVE-2022-39379 affecting package rubygem-fluentd for versions less than 1.14.6-2. A patched version of the package is available...
WordPress OAuth Client by DigitialPixies plugin <= 1.1.0 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability discovered by Lana Codes in WordPress OAuth Client by DigitialPixies plugin versions = 1.1.0 Solution No patched version is available. This plugin has been closed as of October 21, 2022 and is not available for download. This closure is temporary,...
WordPress AdRotate Banner Manager plugin <= 5.9 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Multiple Cross-Site Request Forgery CSRF vulnerabilities leading to resetting some of the maintenance settings Reset tasks, Disable the third party, Update Database were discovered by Muhammad Daffa Patchstack Alliance in the WordPress AdRotate Banner Manager plugin versions = 5.9. Solution...
CVE-2022-39307
Grafana is an open-source platform for monitoring and observability. When using the forget password on the login page, a POST request is made to the /api/user/password/sent-reset-email URL. When the username or email does not exist, a JSON response contains a “user not found” message. This leaks...
CVE-2022-39306
Grafana is an open-source platform for monitoring and observability. Versions prior to 9.2.4, or 8.5.15 on the 8.X branch, are subject to Improper Input Validation. Grafana admins can invite other members to the organization they are an admin for. When admins add members to the organization, non...
PT-2022-27394
Name of the Vulnerable Software and Affected Versions Varnish Cache versions 7.0.0 through 7.1.1 Varnish Cache versions 7.2.0 through 7.2.0 Description An issue was discovered in Varnish Cache, allowing a request smuggling attack to be performed on Varnish Cache servers. This occurs when certain...
CVE-2022-36077 Electron subject to Exfiltration of hashed SMB credentials on Windows via file:// redirect
The Electron framework enables writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 21.0.0-beta.1, 20.0.1, 19.0.11, and 18.3.7, Electron is vulnerable to Exposure of Sensitive Information. When following a redirect, Electron delays a check for redirecti...
CVE-2022-42721 affecting package kernel for versions less than 5.15.74.1-3
CVE-2022-42721 affecting package kernel for versions less than 5.15.74.1-3. A patched version of the package is available...
CVE-2022-3541 affecting package kernel for versions less than 5.15.74.1-3
CVE-2022-3541 affecting package kernel for versions less than 5.15.74.1-3. A patched version of the package is available...
CVE-2022-42719 affecting package kernel for versions less than 5.15.74.1-3
CVE-2022-42719 affecting package kernel for versions less than 5.15.74.1-3. A patched version of the package is available...
CVE-2022-42703 affecting package kernel 5.10.145.1-1
CVE-2022-42703 affecting package kernel 5.10.145.1-1. A patched version of the package is available...
CVE-2022-42721 affecting package kernel 5.10.145.1-1
CVE-2022-42721 affecting package kernel 5.10.145.1-1. A patched version of the package is available...
CVE-2022-0171 affecting package kernel 5.10.145.1-1
CVE-2022-0171 affecting package kernel 5.10.145.1-1. A patched version of the package is available...
CVE-2022-41674 affecting package kernel 5.10.145.1-1
CVE-2022-41674 affecting package kernel 5.10.145.1-1. A patched version of the package is available...
CVE-2022-42722 affecting package kernel 5.10.145.1-1
CVE-2022-42722 affecting package kernel 5.10.145.1-1. A patched version of the package is available...
CVE-2022-42720 affecting package kernel 5.10.145.1-1
CVE-2022-42720 affecting package kernel 5.10.145.1-1. A patched version of the package is available...
CVE-2022-3544 affecting package kernel 5.10.145.1-1
CVE-2022-3544 affecting package kernel 5.10.145.1-1. A patched version of the package is available...
CVE-2022-3647 affecting package redis 6.2.12-1
CVE-2022-3647 affecting package redis 6.2.12-1. A patched version of the package is available...
CVE-2022-39345
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin prior to 2.5.4 is vulnerable to path traversal, which leads to file upload vulnerabilities. Version 2.5.4 contains a patch for this issue. There are no...