6540 matches found
Default configuration
NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to block sensitive cookies e.g. session cookies from being forwarded to backend services configured by the application developer. This could have led to sensitive cooki...
CVE-2022-29968 affecting package kernel 5.10.116.1-1
CVE-2022-29968 affecting package kernel 5.10.116.1-1. A patched version of the package is available...
CVE-2022-28893 affecting package kernel 5.10.116.1-1
CVE-2022-28893 affecting package kernel 5.10.116.1-1. A patched version of the package is available...
CVE-2022-29824 affecting package libxslt 1.1.34-3
CVE-2022-29824 affecting package libxslt 1.1.34-3. A patched version of the package is available...
CVE-2022-1586 affecting package pcre2 10.34-1
CVE-2022-1586 affecting package pcre2 10.34-1. A patched version of the package is available...
CVE-2022-1587 affecting package pcre2 10.34-1
CVE-2022-1587 affecting package pcre2 10.34-1. A patched version of the package is available...
Cross site scripting
django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions prior to 5.5.1 it was possible to traverse the entire AWS S3 bucket and in most cases to access or delete files. If the AWSLOCATION setting was set, traversal was limited to that location only. The issue was...
Cross-Site Scripting Vulnerability In Download Manager Plugin
On May 30, 2022, Security Researcher Rafie Muhammad reported a reflected Cross-Site Scripting XSS vulnerability to us that they discovered in Download Manager, a WordPress plugin installed on over 100,000 sites. On request, we assigned a vulnerability identifier of CVE-2022-1985. All Wordfence...
CVE-2022-0998 affecting package kernel for versions less than 5.15.37.1-2
CVE-2022-0998 affecting package kernel for versions less than 5.15.37.1-2. A patched version of the package is available...
CVE-2022-1353 affecting package kernel for versions less than 5.15.37.1-2
CVE-2022-1353 affecting package kernel for versions less than 5.15.37.1-2. A patched version of the package is available...
CVE-2022-26353 affecting package qemu for versions less than 6.2.0-3
CVE-2022-26353 affecting package qemu for versions less than 6.2.0-3. A patched version of the package is available...
CVE-2022-26354 affecting package qemu for versions less than 6.2.0-2
CVE-2022-26354 affecting package qemu for versions less than 6.2.0-2. A patched version of the package is available...
CVE-2022-1050 affecting package qemu for versions less than 6.2.0-2
CVE-2022-1050 affecting package qemu for versions less than 6.2.0-2. A patched version of the package is available...
CVE-2022-28391 affecting package busybox for versions less than 1.35.0-2
CVE-2022-28391 affecting package busybox for versions less than 1.35.0-2. A patched version of the package is available...
CVE-2021-38185 affecting package cpio for versions less than 2.13-4
CVE-2021-38185 affecting package cpio for versions less than 2.13-4. A patched version of the package is available...
CVE-2022-28805 affecting package lua for versions less than 5.4.3-2
CVE-2022-28805 affecting package lua for versions less than 5.4.3-2. A patched version of the package is available...
Experts Detail New RCE Vulnerability Affecting Google Chrome Dev Channel
Details have emerged about a recently patched critical remote code execution vulnerability in the V8 JavaScript and WebAssembly engine used in Google Chrome and Chromium-based browsers. The issue relates to a case of use-after-free in the instruction optimization component, successful exploitatio...
CVE-2022-29582 affecting package kernel 5.10.111.1-1
CVE-2022-29582 affecting package kernel 5.10.111.1-1. A patched version of the package is available...