PT-2022-23650 · Samsung · Libsdkrecognitiontext.Spensdk.Samsung.So

Name of the Vulnerable Software and Affected Versions: libSDKRecognitionText.spensdk.samsung.so versions prior to SMR Sep-2022 Release 1 Description: A heap-based overflow issue in the ConstructDictionary function allows an attacker to cause a memory access fault. Recommendations: For versions...

PT-2022-23657 · Unknown · Photo Editor

Name of the Vulnerable Software and Affected Versions: Photo Editor versions prior to SMR Sep-2022 Release 1 Description: The issue allows an attacker to obtain sensitive information through intent redirection in the Photo Editor. Recommendations: For versions prior to SMR Sep-2022 Release 1,...

XWiki Platform 安全漏洞

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from XWiki France. A security vulnerability exists in XWiki Platform versions prior to 13.10.5, prior to 14.3RC1, which stems from an incorrect authorization check...

Poetry 参数注入漏洞

Poetry is a tool for dependency management and packaging in Python. It allows you to declare the libraries your project depends on and will manage install/update them for you. A parameter injection vulnerability exists in Poetry versions prior to 1.1.9 and prior to 1.2.0b1, the vulnerability stem...

wikmd 路径遍历漏洞

wikmd is a file-based wiki for individual linbreux developers. A security vulnerability exists in versions of wikmd prior to 1.7.1, which stems from vulnerability to path traversal when accessing /list/ and can leak the list of files on the server...

WordPress plugin Image Hover Effects Ultimate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2022-24225 · Rstudio · Rstudio Connect

Name of the Vulnerable Software and Affected Versions: RStudio Connect versions prior to 2023.01.0 Description: The issue is an Open Redirect problem that could allow an attacker to redirect users to malicious websites. Recommendations: For versions prior to 2023.01.0, update to version 2023.01.0...

RosarioSIS 安全漏洞

RosarioSIS is a free and open source student information system. It is used to manage students, create reports and make sound decisions. A security vulnerability exists in RosarioSIS versions prior to 10.0 that stems from mishandling of length parameter inconsistencies...

Canaan Avalon ASIC Miner 访问控制错误漏洞

Canaan Avalon ASIC Miner is a bitcoin mining machine from Canaan, a Chinese company. A security vulnerability exists in Canaan Avalon ASIC Miner version 2020.3.30 and prior versions, which stems from improper access control. An attacker could use this vulnerability to arbitrarily change a user's...

CVE-2022-28625

A local disclosure of sensitive information vulnerability was discovered in HPE OneView versions: Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability...

CVE-2022-28625

A local disclosure of sensitive information vulnerability was discovered in HPE OneView versions: Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability...

Johnson Controls iSTAR Ultra 命令注入漏洞

Johnson Controls iSTAR Ultra is a door controller from Johnson Controls, Inc. It provides network resiliency and faster processing speeds. A command injection vulnerability exists in versions prior to Johnson Controls iSTAR Ultra 6.8.9.CU01, which originates from allowing root access to the syste...

Freedesktop Poppler 输入验证错误漏洞

Freedesktop Poppler is a Freedesktop community C++ class library for generating PDFs, which is inherited from Xpdf PDF reader. A security vulnerability exists in Poppler version 22.08.0 and prior versions, which stems from an integer overflow in the JBIG2 decoder...

Mumara Classic SQL注入漏洞

Mumara Classic is an email marketing automation software from Mumara, Inc. A SQL injection vulnerability exists in Mumara Classic 2.93 and earlier versions, which can be exploited to execute arbitrary SQL commands with license parameters...

AZL-10620 CVE-2022-2946 affecting package vim for versions less than 9.0.0325-1

Use After Free in GitHub repository vim/vim prior to 9.0.0246...

GHSA-39GF-864W-PXW4 Unverified Password Change in OctoPrint

Versions of OctoPrint prior to 1.8.3 did not require the current user password in order to change that users password. As a result users could be locked out of their accounts or have their accounts stolen under certain circumstances...

Vim 资源管理错误漏洞

Vim is a cross-platform text editor. A resource management error vulnerability exists in versions of Vim prior to 9.0.0245 that stems from reuse after release...

PT-2022-13927 · Lenovo · Lenovo Pcmanager

Name of the Vulnerable Software and Affected Versions: Lenovo PCManager versions prior to 5.0.10.4191 Description: A potential issue in Lenovo PCManager may allow code execution when visiting a specially crafted website. Recommendations: For versions prior to 5.0.10.4191, update to version...

PT-2022-4313 · Cisco · Cisco Asyncos +1

Name of the Vulnerable Software and Affected Versions: Cisco Secure Web Appliance versions prior to 14.5.0-537 Cisco Secure Web Appliance versions 12.5 and 14.0 updates pending Description: A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance could allow...

PT-2022-22027 · Hulu · Hulu App For Ios

Name of the Vulnerable Software and Affected Versions: Hulu App for iOS versions prior to 3.0.81 Description: The issue improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack. Recommendations: For versions pri...