10999 matches found
CVE-2022-2997
Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...
CVE-2022-2982
Use After Free in GitHub repository vim/vim prior to 9.0.0260...
Mumara Classic SQL注入漏洞
Mumara Classic is an email marketing automation software from Mumara, Inc. A SQL injection vulnerability exists in Mumara Classic 2.93 and earlier versions, which can be exploited to execute arbitrary SQL commands with license parameters...
CVE-2022-2980 NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259...
Elastic Cloud Enterprise 日志信息泄露漏洞
Elastic Cloud Enterprise is a cloud platform from Elastic. It makes it easy to deploy, operate, and scale Elastic Stack in the cloud. A security vulnerability exists in ECE versions prior to 3.4.0, which stems from the disclosure of sensitive information about user passwords and Elasticsearch...
AZL-10620 CVE-2022-2946 affecting package vim for versions less than 9.0.0325-1
Use After Free in GitHub repository vim/vim prior to 9.0.0246...
CVE-2022-1989
All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users...
GHSA-39GF-864W-PXW4 Unverified Password Change in OctoPrint
Versions of OctoPrint prior to 1.8.3 did not require the current user password in order to change that users password. As a result users could be locked out of their accounts or have their accounts stolen under certain circumstances...
Vim 资源管理错误漏洞
Vim is a cross-platform text editor. A resource management error vulnerability exists in versions of Vim prior to 9.0.0245 that stems from reuse after release...
PT-2022-13927 · Lenovo · Lenovo Pcmanager
Name of the Vulnerable Software and Affected Versions: Lenovo PCManager versions prior to 5.0.10.4191 Description: A potential issue in Lenovo PCManager may allow code execution when visiting a specially crafted website. Recommendations: For versions prior to 5.0.10.4191, update to version...
CVE-2022-2923
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240...
CVE-2022-2932
Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...
CVE-2022-2932 Cross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit
Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...
CVE-2022-2930
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-1340
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...
CVE-2022-2923 NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240...
PT-2022-21895 · WordPress · Easy Digital Downloads
Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads plugin versions prior to 3.0.2 Description: A PHP Object Injection issue affects the Easy Digital Downloads plugin at WordPress. Recommendations: For versions prior to 3.0.2, update to version 3.0.2 or later to resolve...
CVE-2022-2885 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...