10997 matches found
PT-2022-23191 · Xwiki · Xwiki Platform Applications Tag +1
Name of the Vulnerable Software and Affected Versions: XWiki Platform Applications Tag versions 1.7 through 13.10.5 XWiki Platform Tag UI versions prior to 13.10.6 and 14.4 Description: The tags document Main.Tags in XWiki did not sanitize user inputs properly, allowing users with view rights on...
XWiki Platform 安全漏洞
XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from XWiki France. A security vulnerability exists in XWiki Platform versions prior to 13.10.5, prior to 14.3RC1, which stems from an incorrect authorization check...
PT-2022-20724 · Drawio · Drawio
Name of the Vulnerable Software and Affected Versions: drawio versions prior to 20.3.0 Description: The issue is related to Cross-site Scripting XSS - Generic in the GitHub repository jgraph/drawio. Recommendations: For versions prior to 20.3.0, update to version 20.3.0 or later to resolve the...
CVE-2022-3153 NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404...
CVE-2022-31251 slurm: %post for slurm-testsuite operates as root in user owned directory
A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3...
PT-2022-23158 · Poetry · Poetry
Name of the Vulnerable Software and Affected Versions: Poetry versions prior to 1.1.9 Poetry versions prior to 1.2.0b1 Description: The issue arises from Poetry executing commands like git config using the executable's name instead of its absolute path. This can lead to the execution of untrusted...
Poetry 参数注入漏洞
Poetry is a tool for dependency management and packaging in Python. It allows you to declare the libraries your project depends on and will manage install/update them for you. A parameter injection vulnerability exists in Poetry versions prior to 1.1.9 and prior to 1.2.0b1, the vulnerability stem...
PT-2022-4713
Name of the Vulnerable Software and Affected Versions SUSE Rancher versions prior to 2.6.7 SUSE Rancher versions prior to 2.5.16 Description The issue is related to an Improper Authorization vulnerability in SUSE Rancher. It allows any user with permissions to create or edit cluster role template...
wikmd 路径遍历漏洞
wikmd is a file-based wiki for individual linbreux developers. A security vulnerability exists in versions of wikmd prior to 1.7.1, which stems from vulnerability to path traversal when accessing /list/ and can leak the list of files on the server...
CVE-2022-34747
A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21AAZF.12C0 could allow an attacker to achieve unauthorized remote code execution via a crafted UDP packet...
WordPress plugin Image Hover Effects Ultimate 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
PT-2022-23363 · WordPress · About Rentals Plugin
Name of the Vulnerable Software and Affected Versions: About Rentals plugin versions prior to 1.6 Description: The issue is related to a Missing Access Control vulnerability in the About Rentals plugin for WordPress. Recommendations: For versions prior to 1.6, update to version 1.6 or later to...
Gluu 代码问题漏洞
Gluu is a cloud-hosted identity platform from the US-based Gluu organization. A security vulnerability exists in Gluu Oxauth versions prior to v4.4.1, which can be exploited by an attacker to perform a server-side request forgery SSRF attack via a crafted requesturi parameter...
RosarioSIS 安全漏洞
RosarioSIS is a free and open source student information system. It is used to manage students, create reports and make sound decisions. A security vulnerability exists in RosarioSIS versions prior to 10.0 that stems from mishandling of length parameter inconsistencies...
PT-2022-24225 · Rstudio · Rstudio Connect
Name of the Vulnerable Software and Affected Versions: RStudio Connect versions prior to 2023.01.0 Description: The issue is an Open Redirect problem that could allow an attacker to redirect users to malicious websites. Recommendations: For versions prior to 2023.01.0, update to version 2023.01.0...
Silverware Games SilverwareGames.io 安全漏洞
Silverware Games SilverwareGames.io is an online games site from Silverware Games, Inc. A security vulnerability exists in Silverware Games SilverwareGames.io versions prior to 1.1.8 that stems from an obscure feature of PHP...
CVE-2022-3127 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-3123 Cross-site Scripting (XSS) - Reflected in splitbrain/dokuwiki
Cross-site Scripting XSS - Reflected in GitHub repository splitbrain/dokuwiki prior to 2022-07-31a...
Bitdefender GravityZone 代码问题漏洞
Bitdefender GravityZone is a scanning software from Bitdefender Romania. A code issue vulnerability exists in Bitdefender GravityZone that stems from an untrustworthy data deserialization vulnerability in the console's message handling component that allows an attacker to pass insecure commands t...