2259 matches found
10-Strike Network Inventory Explorer 安全漏洞
10-Strike Network Inventory Explorer is a scanning software from 10-Strike, Inc. for tracking hardware and software on networked computers. A security vulnerability exists in version v9.3 of 10-Strike Network Inventory Explorer that originates from a buffer overflow contained via the Add Computer...
PT-2022-10890 · Glpi · Sccm Plugin For Glpi
Name of the Vulnerable Software and Affected Versions: SCCM plugin for GLPI versions prior to 2.3.0 Description: The SCCM plugin for GLPI has an issue where the Configuration page is publicly accessible in read-only mode in versions prior to 2.3.0. This issue is patched in version 2.3.0...
CVE-2022-3242 HTML code Injection in template search keyword in microweber/microweber
Code Injection in GitHub repository microweber/microweber prior to 1.3.2...
CVE-2022-38401
Adobe InCopy version 17.3 and earlier and 16.4.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fil...
CVE-2022-26959
There are two full read/write Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter of the login.jsp pag...
GLPI 跨站脚本漏洞
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...
Crestron AirMedia 安全漏洞
Crestron AirMedia is Crestron's unlimited sharing platform for laptops, PCs, smartphones or tablets. A security vulnerability exists in Crestron AirMedia Windows Application version 4.3.1.39. An attacker could exploit the vulnerability to temporarily store a file structure and change it during a...
PT-2022-25338 · Canto · Canto Cumulus
Name of the Vulnerable Software and Affected Versions: Canto Cumulus versions through 11.1.3 Description: A Server-Side Request Forgery issue allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the...
RosarioSIS 跨站脚本漏洞
RosarioSIS is a free and open source student information system. It is used to manage students, create reports and make the right decisions. A cross-site scripting vulnerability exists in RosarioSIS versions prior to 8.9.3, which stems from a vulnerability in its upload functionality leading to a...
GNU Inetutils 代码问题漏洞
GNU Inetutils is a common set of networking programs in the GNU community. A security vulnerability exists in GNU Inetutils version 2.3 and earlier, MIT krb5-appl version 1.0.3 and earlier, which stems from dereferencing the NULL pointer and causes the telnetd application to crash...
CVE-2022-35019
Advancecomp v2.3 was discovered to contain a segmentation fault...
AZL-43558 CVE-2022-35018 affecting package advancecomp 2.5-1
Advancecomp v2.3 was discovered to contain a segmentation fault...
DEBIAN-CVE-2022-35016
Advancecomp v2.3 was discovered to contain a heap buffer overflow...
AZL-44328 CVE-2022-35017 affecting package advancecomp 2.6-1
Advancecomp v2.3 was discovered to contain a heap buffer overflow...
CVE-2022-35014
Advancecomp v2.3 contains a segmentation fault...
DEBIAN-CVE-2022-35017
Advancecomp v2.3 was discovered to contain a heap buffer overflow...
PT-2022-22499 · Unknown +4 · Advancecomp +4
Name of the Vulnerable Software and Affected Versions: Advancecomp version 2.3 Description: A heap buffer overflow issue was discovered in Advancecomp via the component interceptor memcpy at /sanitizer common/sanitizer common interceptors.inc. This issue affects the specified version of...
WordPress plugin Directorist 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2022-16256 · WordPress · Directorist
Name of the Vulnerable Software and Affected Versions: Directorist WordPress plugin versions prior to 7.3.0 Description: The issue concerns a lack of authorization and CSRF checks in an AJAX action within the Directorist WordPress plugin. This allows any authenticated users to send arbitrary emai...