PT-2022-27704 · Alist · Alist

Name of the Vulnerable Software and Affected Versions: Alist versions prior to 3.6.0 Description: The issue allows a user with only file upload permission to bypass the base path restriction by using '../' to upload files to an arbitrary path, which is a form of Directory Traversal or Path...

WSO2 carbon-registry 跨站脚本漏洞

The WSO2 carbon-registry is a platform from WSO2 USA, Inc. that allows organizations to track, manage and trade greenhouse gas emissions GHG emissions. A security vulnerability exists in WSO2 carbon-registry versions prior to 4.8.11. An attacker exploited the vulnerability to perform a cross-site...

OpenEMR 跨站脚本漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site scripting vulnerability exists in versions prior to OpenEMR 7.0.0.2. ...

CVE-2022-46160 Tuleap dashboards vulnerable to Incorrect Authorization

Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.104, project level authorizations are not properly verified when accessing the project "homepage"/dashboards. Users not authorized to access a project may still be able to...

Hewlett Packard Enterprise OfficeConnect 授权问题漏洞

Hewlett Packard Enterprise OfficeConnect is a family of switches from Hewlett Packard Enterprise USA. A security vulnerability exists in the Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches, which stems from the discovery of a potential security flaw that can be...

WordPress plugin Buddybadges SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PT-2022-25645 · WordPress · All-In-One Security

Name of the Vulnerable Software and Affected Versions: All-In-One Security AIOS WordPress plugin versions prior to 5.0.8 Description: The issue allows for IP Spoofing attacks, which can result in the bypassing of security features such as IP blocks, rate limiting, and brute force protection...

PT-2022-24882 · WordPress · Directorist

Name of the Vulnerable Software and Affected Versions: Directorist WordPress plugin versions prior to 7.4.2.2 Description: The issue allows an attacker to exploit an IDOR vulnerability, enabling them to change the password of arbitrary users instead of their own. Recommendations: For Directorist...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system from the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ versions prior to 3.1.9. An attacker exploited the vulnerability to perform cross-site scripting attacks...

PT-2022-27051 · Radare2 +1 · Radare2 +1

Name of the Vulnerable Software and Affected Versions: radare2 versions prior to 5.8.0 Description: The issue is related to an integer overflow or wraparound. Recommendations: For versions prior to 5.8.0, update to version 5.8.0 or later to resolve the issue...

CVE-2022-44455

The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the...

PT-2022-36587 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.334 Description: The issue concerns a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-16010 · Traefik +1 · Traefik +1

Name of the Vulnerable Software and Affected Versions: Traefik versions prior to 2.9.6 Description: There is a potential issue in Traefik where the Authorization header is displayed in its debug logs. This occurs when the log level is set to DEBUG, and credentials provided using the Authorization...

PT-2022-25089 · Contacts · Contacts

Name of the Vulnerable Software and Affected Versions: Contacts versions prior to SMR Dec-2022 Release 1 Description: The issue allows access to sensitive information via implicit intent due to improper access control. Recommendations: For versions prior to SMR Dec-2022 Release 1, update to SMR...

PT-2022-36253 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. The issue was introduced in version v2.6.39 and is...

PT-2022-26079 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.4 Description: The kernel subsystem within OpenHarmony has a kernel stack overflow issue when the SysClockGetres function is called. This results in 4 bytes of padding data from the kernel stack being copied ...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Dec-2022 Release 1. An attacker can exploit the vulnerability to acces...

NodeBB 安全漏洞

NodeBB is a forum system from the Design Create Play team built using Node.js, a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability exists in NodeBB versions prior to 2.6.1, which stems from the use of plain objects with prototypes in socket.io messag...

WordPress 授权问题漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress versions prior to 6.0.3 have an authorization issue vulnerability that stems from incorrect...

Veritas Technologies NetBackup Flex Scale 安全漏洞

Veritas Technologies NetBackup Flex Scale is a software extension from Veritas Technologies, Inc. It maximizes the power of NetBackup data protection through a containerized, horizontally scalable architecture. A security vulnerability exists in Veritas Technologies NetBackup Flex Scale 3.0 and...