CVE-2022-32260

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application creates temporary user credentials for UMC User Management Component users. An attacker could use these temporary credentials for authentication bypass in certain scenarios...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.2, which stems from a containment segmentation violation at an unknown address in /Source/C++/Core/Ap4DataBuffer.cpp...

CVE-2022-2014

Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...

CSCMS Music Portal System 跨站请求伪造漏洞

CSCMS Music Portal System is a multifaceted content management system from China Chongsheng Network Technology CSCMS. A cross-site request forgery vulnerability exists in CSCMS Music Portal System v4.2, which originates from a cross-site request forgery CSRF vulnerability in...

OAuthenticator 安全漏洞

OAuthenticator is an OAuth token library for the JupyerHub login handler. A security vulnerability exists in OAuthenticator version 14.2.0 and earlier, which stems from CILogon, a federated authentication provider that allows users to authenticate with multiple identity providers IdPs...

CVE-2022-1684

The Cube Slider WordPress plugin through 1.2 does not sanitise and escape the idslider parameter before using it in various SQL queries, leading to SQL Injections exploitable by high privileged users such as admin...

Poly EagleEye Director 操作系统命令注入漏洞

Poly EagleEye Director is a conference camera system with automated people tracking from Poly USA. An operating system command injection vulnerability exists in Poly EagleEye Director II version 2.2.1.1, which stems from...

CVE-2022-29624

An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-1968

Use After Free in GitHub repository vim/vim prior to 8.2...

RESI Gemini-Net 跨站脚本漏洞

RESI Gemini-Net is a technology from RESI Italy for active and passive monitoring of communication networks and services.A cross-site scripting vulnerability exists in RESI Gemini-Net version 4.2. An attacker could exploit this vulnerability to inject arbitrary Web script or HTML into HTTP GET...

eG Innovations eG Agent 权限许可和访问控制问题漏洞

The eG Innovations eG Agent is eG Innovations' way to monitor your environment by running periodic tests. A security vulnerability exists in eG Innovations eG Agent versions prior to 7.2. An attacker exploited the vulnerability to escalate privileges to SYSTEM...

DEBIAN-CVE-2022-1942

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

DEBIAN-CVE-2022-1927

Buffer Over-read in GitHub repository vim/vim prior to 8.2...

CVE-2022-1898

Use After Free in GitHub repository vim/vim prior to 8.2...

CVE-2022-31648

Talend Administration Center is vulnerable to a reflected Cross-Site Scripting XSS issue in the SSO login endpoint. The issue is fixed for versions 8.0.x in TPS-5233, for versions 7.3.x in TPS-5324, and for versions 7.2.x in TPS-5235. Earlier versions of Talend Administration Center may also be...

DEBIAN-CVE-2022-21831

A code injection vulnerability exists in the Active Storage = v5.2.0 that could allow an attacker to execute code via imageprocessing arguments...

ALPINE-CVE-2022-1886

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-29662

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save...

CVE-2022-29682

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/vod/admin/topic/del...

PT-2022-19580 · Apache · Apache Archiva

Name of the Vulnerable Software and Affected Versions: Apache Archiva versions prior to 2.2.8 Description: The issue allows any registered user to reset the password for any other user. Recommendations: For versions prior to 2.2.8, update to version 2.2.8 to resolve the issue...