10997 matches found
CVE-2022-3099
Use After Free in GitHub repository vim/vim prior to 9.0.0360...
CVE-2022-36640
influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: the CVE ID assignment is disputed because the vendor's documentation states "If InfluxDB is being deployed on a publicly accessible endpoint...
PT-2022-24011 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 2.8.8 Description: The issue allows administrators to send invitations to arbitrary email addresses at an unlimited rate. Recommendations: For versions prior to 2.8.8, update to version 2.8.8 or later to resolve th...
PT-2022-24256 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.3.4 Description: The issue is related to an insecure umask configuration in Apache Airflow when running with the --daemon flag. This could lead to a race condition, resulting in world-writable files in the...
Canaan Avalon ASIC Miner 访问控制错误漏洞
Canaan Avalon ASIC Miner is a bitcoin mining machine from Canaan, a Chinese company. A security vulnerability exists in Canaan Avalon ASIC Miner version 2020.3.30 and prior versions, which stems from improper access control. An attacker could use this vulnerability to arbitrarily change a user's...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.10)
The version of AOS installed on the remote host is prior to 5.10. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.10 advisory. - In the Linux kernel, a certain net/ipv4/tcpoutput.c change, which was properly incorporated into 4.16.12, was incorrectly...
CVE-2022-28625
A local disclosure of sensitive information vulnerability was discovered in HPE OneView versions: Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability...
CVE-2022-28625
A local disclosure of sensitive information vulnerability was discovered in HPE OneView versions: Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability...
UBUNTU-CVE-2022-1259
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629...
Code injection
AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, which may allow an attacker to obtain the login credentials and login as a valid user. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73;...
GitLab 输入验证错误漏洞
GitLab is an open source, end-to-end software development platform from GitLab Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in all versions of GitLab Community Edition CE a...
Johnson Controls iSTAR Ultra 命令注入漏洞
Johnson Controls iSTAR Ultra is a door controller from Johnson Controls, Inc. It provides network resiliency and faster processing speeds. A command injection vulnerability exists in versions prior to Johnson Controls iSTAR Ultra 6.8.9.CU01, which originates from allowing root access to the syste...
PT-2022-17790 · Micro Focus · Micro Focus Arcsight Logger
Name of the Vulnerable Software and Affected Versions: Micro Focus ArcSight Logger versions prior to 7.2.2 Description: The issue affects Micro Focus ArcSight Logger, where potential vulnerabilities could be remotely exploited, resulting in Information Disclosure or Self Cross-Site Scripting XSS...
Freedesktop Poppler 输入验证错误漏洞
Freedesktop Poppler is a Freedesktop community C++ class library for generating PDFs, which is inherited from Xpdf PDF reader. A security vulnerability exists in Poppler version 22.08.0 and prior versions, which stems from an integer overflow in the JBIG2 decoder...
PT-2022-17247 · WordPress · Woocommerce Pdf Invoices & Packing Slips
Name of the Vulnerable Software and Affected Versions: WooCommerce PDF Invoices & Packing Slips WordPress plugin versions prior to 3.0.1 Description: The issue is related to Reflected Cross-Site Scripting. It occurs because some parameters are not properly sanitised and escaped before being...
PT-2022-20885 · Unknown · Pinniped Supervisor
Name of the Vulnerable Software and Affected Versions: Pinniped Supervisor versions prior to 0.19.0 Description: An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor. A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially use their...
WordPress plugin WP Hide & Security Enhancer 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2022-3016 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0286...
