3992 matches found
fastrack Reflex 安全漏洞
The fastrack Reflex is a smart wearable device from fastrack. A security vulnerability exists in fastrack Reflex version 2.0 W307SREFLEXv90.89, which stems from an activity tracker that allows remote attackers to change the time, date, and month via the Bluetooth LE feature on handle 0x0017...
PT-2022-8296 · Github · Hide Files On Github
Name of the Vulnerable Software and Affected Versions: Hide Files on GitHub versions up to 2.x Description: A problematic issue has been found in Hide Files on GitHub, affecting the function addEventListener of the file extension/options.js. This issue leads to cross-site scripting and can be...
PT-2022-16062
Name of the Vulnerable Software and Affected Versions jsonwebtoken versions = 8.5.1 Description The jsonwebtoken library can be misconfigured, leading to incorrect verification of tokens. This occurs when a poorly implemented key retrieval function is used, referring to the secretOrPublicKey...
SUSE-SU-2022:4602-1 Security update for java-1_8_0-ibm
This update for java-180-ibm fixes the following issues: IBM Security Update November 2022: bsc1205302, bsc1204703 - CVE-2022-3676: A security vulnerability was fixed in version 8.0.7.20, adding the reference here...
PT-2022-16054 · Npm · Jsonwebtoken
Name of the Vulnerable Software and Affected Versions: jsonwebtoken versions = 8.5.1 Description: A high-severity security flaw has been discovered in the jsonwebtoken library, leading to remote code execution RCE attacks. The issue arises when a malicious actor can modify the key retrieval...
CVE-2022-46421 Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_params
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0...
PT-2022-27729 · Unknown · Helmet Store Showroom
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom version 1.0 Description: The issue is related to a SQL Injection vulnerability at the Login Page. This vulnerability can be exploited to bypass admin access. Recommendations: For Helmet Store Showroom version 1.0, consid...
PT-2022-27877 · Unknown · Mesinkasir Bangresto
Name of the Vulnerable Software and Affected Versions: mesinkasir Bangresto version 1.0 Description: The issue is related to SQL Injection via the itemqty%5B%5D parameter. This allows for potential exploitation. Recommendations: For mesinkasir Bangresto version 1.0, consider restricting access to...
CVE-2022-46122
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/viewcategory.php?id=...
Siemens SICAM PAS/PQS 代码问题漏洞
Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. A security vulnerability exists in Siemens SICAM PAS/PQS versions prior to V7.0 that stems from a failure to properly protect the containing folder. An attacker can exploit the...
PT-2022-24569 · WordPress · The Car Dealer (Dealership)/Vehicle Sales Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: The Car Dealer Dealership and Vehicle sales WordPress Plugin versions prior to 3.05 Description: The issue is related to improper authorization and CSRF in an AJAX action. This allows any authenticated users, such as subscribers, to call the...
S-CMS 跨站脚本漏洞
S-CMS is a PHP and MySQL based Content Management System CMS from S-CMS China. A security vulnerability exists in S-CMS version 5.0 Build 20220328. An attacker can exploit the vulnerability to perform cross-site scripting attacks...
Akeneo PIM Development Repository 代码注入漏洞
Akeneo PIM Development Repository is an Akeneo open source repository . It is used to develop Akeneo PIM products. A code injection vulnerability exists in Akeneo PIM Development Repository versions prior to v5.0.119 and v6.0.53, which originates from a code injection vulnerability that could all...
@weedx/components (=0.0.1-beta), acmcoder-ui (>=1.0.2 <=1.0.11) +8 more potentially affected by CVE-2022-23494 via tinymce (>=6.0.0 <=6.2.0)
tinymce NPM version =6.0.0, =1.0.2, =1.0.96, =0.0.19, =1.0.0, =0.70.4, =1.0.6, =0.0.2, =0.0.5 Source cves: CVE-2022-23494 Source advisory: OSV:GHSA-GG8R-XJWQ-4W92...
pb-cms 安全漏洞
pb-cms is a content management system by LinZhaoguan Personal Developer. A security vulnerability exists in pb-cms version 2.0, which stems from its IpUtil.getIpAddr function that allows attackers to implement cross-site scripting. The attack method has been made public and can be initiated...
PT-2022-36023 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to a use-after-free in the snd soc exit function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
CVE-2022-3858
CVE-2022-3858 affects the WordPress plugin Chaty / Floating Chat Widget prior to version 3.0.3. The issue is an SQL injection caused by improper sanitisation/escaping of a parameter before it is used in a SQL statement, making it exploitable by users with a role as low as admin. Documented impact...
CVE-2022-43097
Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...
WordPress plugin Clerk 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...