1243 matches found
PT-2022-35768 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A kernel NULL pointer dereference error was identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v4.19.262,...
PT-2022-35587 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.148 Description: A potential security issue exists in the wifi cfg80211/mac80211 component, where bad MBSSID elements are not properly rejected. The actual impact and attack plausibility of this issue have...
PT-2022-17687 · Intel · Intel Nuc 8 Rugged Kits +3
Name of the Vulnerable Software and Affected Versions: IntelR NUC Boards versions prior to CHAPLCEL.0059 IntelR NUC 8 Boards versions prior to CHAPLCEL.0059 IntelR NUC 8 Rugged Boards versions prior to CHAPLCEL.0059 IntelR NUC 8 Rugged Kits versions prior to CHAPLCEL.0059 Description: The issue i...
PT-2022-21941 · Intel · Intel Wapi Security
Name of the Vulnerable Software and Affected Versions: IntelR WAPI Security software for Windows 10/11 versions prior to 22.2150.0.1 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-26088
An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to inject HTML such as an SSRF payload into the Activity Log by placing it in the To: field. This affects rendering that occurs upon a click in the "number of recipients" field...
PT-2022-26444 · WordPress · Traffic Manager
Name of the Vulnerable Software and Affected Versions: Traffic Manager plugin versions prior to 1.4.6 Description: The issue is related to a Broken Access Control vulnerability that leads to Stored Cross-Site Scripting XSS in the Traffic Manager plugin on WordPress. Recommendations: For Traffic...
PT-2022-23878 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: Froxlor versions prior to 0.10.39 Description: The issue concerns a Code Injection problem. It is reported that Froxlor is vulnerable to this issue. Recommendations: For versions prior to 0.10.39, update to version 0.10.39 or later to resolve...
PT-2022-24674 · Pdftron Systems +1 · Pdftron +1
Name of the Vulnerable Software and Affected Versions: M-Files Hubshare versions prior to 3.3.11.3 Description: The issue concerns broken access controls on PDFtron data, allowing unauthenticated attackers to access restricted PDF files via a known URL. Recommendations: For versions prior to...
WordPress plugin WP Humans.txt 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2022-39866
Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...
DEBIAN-CVE-2022-3051
Heap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions...
Knot Resolver 资源管理错误漏洞
Knot Resolver is a cached DNS resolver implementation that includes a resolver library and daemon. A denial of service vulnerability exists in NIC Knot Resolver versions prior to 5.5.3. The vulnerability stems from not properly handling incoming error messages and can be exploited by a remote...
CVE-2022-3224 Misinterpretation of Input in ionicabizau/parse-url
Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0...
Fortinet Fortigate xss (FG-IR-21-222)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-222 advisory. - An improper neutralization of input during web page generation vulnerability CWE-79 in FortiOS version 7.2.0, version 6.4.0...
Amazon Linux 2 : kernel, --advisory ALAS2-2022-1838 (ALAS-2022-1838)
The version of kernel installed on the remote host is prior to 4.14.291-218.527. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1838 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the...
PT-2022-4713
Name of the Vulnerable Software and Affected Versions SUSE Rancher versions prior to 2.6.7 SUSE Rancher versions prior to 2.5.16 Description The issue is related to an Improper Authorization vulnerability in SUSE Rancher. It allows any user with permissions to create or edit cluster role template...
CVE-2022-34747
A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21AAZF.12C0 could allow an attacker to achieve unauthorized remote code execution via a crafted UDP packet...
CVE-2022-2152
The Duplicate Page and Post WordPress plugin before 2.8 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2022-2587
Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit heap corruption via crafted audio metadata...