CVE-2022-42438

IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM X-Force ID: 238210...

IBM Cloud Pak for Multicloud Management 安全漏洞

IBM Cloud Pak for Multicloud Management is an application from International Business Machines IBM, Inc. used to manage the default functionality of multi-cloud environments. a security vulnerability exists in IBM Cloud Pak for Multicloud Management Monitoring version 2.0, version 2.3. An attacke...

Zammad 安全漏洞

Zammad is a ticket management software package from the German company Zammad. A security vulnerability exists in Zammad version v5.3.0, which can be exploited by attackers to execute arbitrary code or elevate privileges...

CVE-2023-23087

An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function...

Dentsply Sirona Sidexis 安全漏洞

Dentsply Sirona Sidexis is a suite of imaging processing software for definitive diagnostics in the healthcare industry from Dentsply Sirona, Inc. in the United States. A security vulnerability exists in Dentsply Sirona Sidexis version 4.3 and prior versions that stems from incorrect access contr...

PT-2023-14440 · Dentsply Sirona · Sidexis

Name of the Vulnerable Software and Affected Versions: Dentsply Sirona Sidexis versions prior to 4.3 Description: The issue is related to Incorrect Access Control. Recommendations: For versions prior to 4.3, update to a version that includes the fix for this issue. At the moment, there is no...

Apple tvOS 安全漏洞

Apple tvOS is a set of smart TV operating systems from Apple USA. A security vulnerability exists in Apple tvOS versions prior to 16.3, which stems from a memory handling issue that could allow applications to disclose sensitive kernel state...

Apple tvOS 安全漏洞

Apple tvOS is a set of smart TV operating systems from Apple Inc. in the United States. A security vulnerability exists in versions of Apple tvOS prior to 16.3, which stems from a logic issue that may allow applications to bypass privacy preferences...

Apple tvOS 安全漏洞

Apple tvOS is a set of smart TV operating systems from Apple Inc. in the United States. A security vulnerability exists in Apple tvOS versions prior to 16.3, which stems from a cache handling issue, where accessing a website may result in an application denial of service...

DEBIAN-CVE-2023-23143

Buffer overflow vulnerability in function avcparseslice in file mediatools/avparsers.c. GPAC version 2.3-DEV-rev1-g4669ba229-master...

CVE-2022-41441

Multiple cross-site scripting XSS vulnerabilities in ReQlogic v11.3 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the POBatch and WaitDuration parameters...

WordPress plugin Social Warfare 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

Trellix Application and Change Control 安全漏洞

Trellix Application and Change Control Trellix ACC is an application and change control program from American FireEye Trellix. A security vulnerability exists in Trellix Application and Change Control versions prior to 8.3.4, which stems from a vulnerability that allows a locally logged-in attack...

PT-2023-13945 · WordPress · Royal Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons WordPress plugin versions prior to 1.3.56 Description: The issue is related to the lack of authorization and CSRF checks when deleting a template, and it does not ensure that the post to be deleted is a template. Th...

ReFirm Labs Binwalk 后置链接漏洞

Binwalk is a fast, easy-to-use tool from ReFirm Labs open source. Used to analyze, reverse engineer and extract firmware images. A security vulnerability exists in ReFirm Labs Binwalk versions prior to 2.3.2, which originates from an unknown function in the file src/binwalk/modules/extractor.py o...

PT-2022-7074 · WordPress · Login As User/Customer

Name of the Vulnerable Software and Affected Versions: Login as User or Customer WordPress plugin versions prior to 3.3 Description: The issue is related to insufficient authorization checks, which could allow unauthenticated attackers to obtain a valid admin session by logging in as another user...

CVE-2022-30260

Emerson DeltaV Distributed Control System DCS has insufficient verification of firmware integrity an inadequate checksum approach, and no signature. This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and DeltaV CIOC/EIOC/WIOC IO cards...

CVE-2022-22184

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...

CVE-2022-31701

VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3...

PT-2022-6004 · Adobe · Campaign

Name of the Vulnerable Software and Affected Versions: Adobe Campaign versions 7.3.1 and earlier Adobe Campaign versions 8.3.9 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A low-privilege...