PT-2022-17525 · Unknown · Cert/Cc Vince

Name of the Vulnerable Software and Affected Versions: CERT/CC VINCE versions prior to 1.50.0 Description: An open redirect issue exists, allowing an attacker to send a specially crafted URL link that, when clicked by an authenticated user, could redirect the user's browser to a malicious site...

Arvados 代码问题漏洞

Arvados is an open source platform for managing and analyzing biomedical big data. A code issue vulnerability exists in Arvados versions prior to 2.4.1, which stems from insecure deserialization and can be exploited by an attacker to execute arbitrary code via a specially crafted JSON payload...

CVE-2022-30630

Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators...

kavita 代码问题漏洞

kavita is a fast, feature-rich, cross-platform reading server. A code issue vulnerability exists in kavita versions prior to 0.5.4.1. An attacker could exploit this vulnerability to perform server-side request forgery attacks...

PT-2022-18359 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.1 Description: The issue is related to Cross-site Scripting XSS - DOM, which allows an attacker to execute malicious scripts in the browser of a user. This can lead to unauthorized access to sensitive informati...

OpenEMR 安全漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in OpenEMR versions prior to 7.0.0.1 that stems fr...

PT-2022-23211

Name of the Vulnerable Software and Affected Versions Apache Avro Rust SDK versions prior to 0.14.0 Description The issue allows a Reader to consume memory beyond the allowed constraints, leading to out of memory on the system. This affects Rust applications using the Apache Avro Rust SDK...

PT-2022-18376 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.1 Description: The issue is related to Cross-site Scripting XSS - Reflected. This is a type of security vulnerability that occurs when an application includes user input in its response without properly...

PT-2023-12901 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome on Chrome OS and Lacros versions prior to 104.0.5112.79 Description: A use after free issue in Exosphere allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption...

PT-2022-21840 · Unknown · Bluetoothscandialog

Name of the Vulnerable Software and Affected Versions: BluetoothScanDialog versions prior to SMR Aug-2022 Release 1 Description: A vulnerable code in the onCreate method of BluetoothScanDialog allows attackers to trick the user into selecting an unwanted Bluetooth device via tapjacking/overlay...

PT-2022-21844 · Unknown · Secdevicepickerdialog

Name of the Vulnerable Software and Affected Versions: SecDevicePickerDialog versions prior to SMR Aug-2022 Release 1 Description: A vulnerable code in the onCreate method of SecDevicePickerDialog allows attackers to trick the user into selecting an unwanted Bluetooth device via tapjacking or...

PT-2022-23642 · Samsung · Galaxy Wearable

Name of the Vulnerable Software and Affected Versions: Galaxy Wearable versions prior to 2.2.50 Description: The issue allows an attacker to obtain sensitive information through an Implicit Intent hijacking vulnerability. Recommendations: For Galaxy Wearable versions prior to 2.2.50, update to...

NLnet Labs Unbound 代码问题漏洞

NLnet Labs Unbound is an open source DNS server from NLnet Labs. A code issue vulnerability exists in NLnet Labs Unbound version 1.16.1 and prior versions, which stems from a vulnerability that allows a malicious user to continue triggering the resolvability of malicious domain names...

Jenkins Plugin HashiCorp Vault 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Jenkins Plugin Deployer Framework 路径遍历漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A path traversal...

thenify 安全漏洞

thenify is an open source callback-based function from Thenables that uses . A security vulnerability exists in versions prior to thenify 3.3.1 , which stems from the vulnerability of this package to arbitrary code execution , the name parameter provided to the package can be controlled by the us...

PT-2022-5004 · Hitachi Energy · Hitachi Energy Msm

Name of the Vulnerable Software and Affected Versions: Hitachi Energy MSM versions V2.2 and prior Description: A vulnerability exists in the HTTP web interface where it does not validate data in an HTTP header, leading to a possible HTTP response splitting. This could allow an attacker to channel...

DEBIAN-CVE-2022-1096

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

elasticsearch: Document disclosure flaw when Document or Field Level Security is used

In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the...

Oracle MySQL 输入验证错误漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An input validation error vulnerability exists in Oracle MySQL version 8.0.28 and prior versions. The vulnerability originates from an attacker with...