Veritas NetBackup 安全漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual environments, and other environmental data. A security vulnerabili...

PT-2022-34697 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.258 Description: The issue is related to a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

DEBIAN-CVE-2022-3352

Use After Free in GitHub repository vim/vim prior to 9.0.0614...

GHSA-M54F-RP6R-RRRM XXL-JOB contains a Command execution vulnerability in background tasks

XXL-JOB versions 2.2.0 and prior contain a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

Rdiffweb 安全漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. Provides quick access to your archives through an efficient web interface. A weak password vulnerability exists in Rdiffweb versions prior to 2.4.9, which can be exploited by attackers to obtain sensitive...

PT-2022-25627 · Xxl-Job · Xxl-Job

Name of the Vulnerable Software and Affected Versions: XXL-JOB versions 2.2.0 and prior Description: The issue concerns a Command execution vulnerability in background tasks, which is disputed as it may be an intended use case for running arbitrary Bash scripts on behalf of users. Recommendations...

Carlo Gavazzi UWP 路径遍历漏洞

Carlo Gavazzi UWP is a monitoring and control Universal Web Platform from Carlo Gavazzi. It is used for applications such as building automation, energy efficiency performance management and parking lot guidance. A path traversal vulnerability exists in Carlo Gavazzi UWP 3.0, which can be exploit...

PT-2022-20394 · Unknown · B2Evolution

Name of the Vulnerable Software and Affected Versions: b2evolution versions prior to 7.2.3 Description: An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for any user through the use of a bad randomness function. This allows the...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 106.0.5249.62, which stems from a confusion in the instructions responsible for freeing memory in Survey. An attacker could exploit the vulnerability t...

PT-2022-24451 · Unknown · Academy Learning Management System

Name of the Vulnerable Software and Affected Versions: Academy Learning Management System versions prior to 5.9.1 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability occurs via the Search parameter, allowing potential attackers to inject...

WordPress plugin Backup Scheduler 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress plugin Add Shortcodes Actions And Filters 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Vim 代码问题漏洞

Vim is a cross-platform text editor. a code issue vulnerability exists in versions prior to Vim 9.0.0552, which stems from NULL pointer dereferencing. No detailed vulnerability details are currently available...

Rdiffweb 跨站请求伪造漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A cross-site request forgery vulnerability exists in Rdiffweb versions prior to 2.4.6. An attacker could exploit this vulnerability t...

Rdiffweb 跨站请求伪造漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A cross-site request forgery vulnerability exists in Rdiffweb versions prior to 2.4.6, which stems from cross-site request forgery CS...

mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Apr 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PAM Auth Plugin. Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server...

Kayrasoft 2 SQL注入漏洞

Kayrasoft is a multi-platform, full-stack software development platform from the Turkish company Kayrasoft. A security vulnerability exists in previous versions of Kayrasoft 2, which stems from an unauthenticated attacker being able to implement SQL injection...

PT-2022-4840 · Dataprobe · Dataprobe Iboot Pdu

Name of the Vulnerable Software and Affected Versions: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 Description: The issue is related to the device's existing firmware, which allows unauthenticated users to access an old PHP page vulnerable to directory traversal. This may enable a user...

SFTPGo 跨站脚本漏洞

SFTPGo is a full-featured and highly configurable SFTP server by Nicola Murino, a personal developer in Italy. A cross-site scripting vulnerability exists in SFTPGo versions prior to 2.3.5, which can be exploited by an attacker to inject malicious code...

PT-2022-7566 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: vim/vim versions prior to 9.0.0530 Description: The issue is related to a Use After Free vulnerability in the mark.c component of the Vim text editor, which allows an attacker to access confidential data, compromise its integrity, and cause a...