PT-2022-25496 · League Of Extraordinary Packages +1 · League/Flysystem +1

Name of the Vulnerable Software and Affected Versions: UniSharp laravel-filemanager aka Laravel Filemanager versions prior to 2.6.4 league/flysystem versions prior to 2.0.0 Description: The issue allows download?working dir=%2F.. directory traversal to read arbitrary files. This has been exploite...

PT-2022-7405 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.3 Description: The issue is related to a SQL injection attack that could allow an attacker to simulate an arbitrary user login. This is due to the lack of protection measures for the SQL query structure. The...

PYSEC-2022-271

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...

Penta Security Systems WAPPLES 信任管理问题漏洞

Penta Security Systems WAPPLES is a logical web application firewall from Penta Security Systems, India. A vulnerability exists in Penta Security Systems WAPPLES version 6.0 and prior versions due to a trust management issue. An attacker could exploit the vulnerability to access system...

CVE-2022-3178

Removed by vendor...

PT-2022-21548 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7 macOS Ventura versions prior to 13 iOS versions prior to 16 watchOS versions prior to 9 macOS Monterey versions prior to 12.6 tvOS versions prior to 16 Description: A logic issue was addressed with improved...

Linksys E5350 访问控制错误漏洞

Linksys E5350 is a router from Linksys USA. An access control error vulnerability exists in the Linksys E5350 WiFi Router version 1.0.00.037 and prior versions. An attacker could exploit this vulnerability to access the device's web interface and extract sensitive information...

PT-2022-26605 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: This issue allows a user in a privileged network position to potentially track user activity. The issue was addressed with improved data protection. Recommendations: For versions prior to 13, update to...

CVE-2022-40325

SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR 67262...

Sysaid Technologies SysAid 跨站脚本漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel. A security vulnerability exists in Sysaid Technologies SysAid Help Desk versions prior to 22.1.65. No information about this vulnerability is available at this time, so please stay tuned to...

CVE-2022-3133

OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0...

CVE-2022-38081

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system...

CVE-2022-38064

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information...

CVE-2022-36860

A heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-2925

Cross-site Scripting XSS - Stored in GitHub repository appwrite/appwrite prior to 1.0.0-RC1...

WordPress plugin Rank Math 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

PT-2022-23650 · Samsung · Libsdkrecognitiontext.Spensdk.Samsung.So

Name of the Vulnerable Software and Affected Versions: libSDKRecognitionText.spensdk.samsung.so versions prior to SMR Sep-2022 Release 1 Description: A heap-based overflow issue in the ConstructDictionary function allows an attacker to cause a memory access fault. Recommendations: For versions...

PT-2022-23649 · Samsung · Libsdkrecognitiontext.Spensdk.Samsung.So

Name of the Vulnerable Software and Affected Versions: libSDKRecognitionText.spensdk.samsung.so versions prior to SMR Sep-2022 Release 1 Description: A heap-based overflow issue in the MHW RECOG LIB INFO function allows an attacker to cause a memory access fault. Recommendations: For versions pri...

PT-2022-23657 · Unknown · Photo Editor

Name of the Vulnerable Software and Affected Versions: Photo Editor versions prior to SMR Sep-2022 Release 1 Description: The issue allows an attacker to obtain sensitive information through intent redirection in the Photo Editor. Recommendations: For versions prior to SMR Sep-2022 Release 1,...

CVE-2022-35273

OS command injection vulnerability in GUI setting page of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command...