10998 matches found
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
Information disclosure
Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...
CVE-2022-2889 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
CVE-2022-2862
Use After Free in GitHub repository vim/vim prior to 9.0.0221...
CVE-2022-2845
Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218...
CVE-2022-2862
Use After Free in GitHub repository vim/vim prior to 9.0.0221...
CVE-2022-2849 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220...
PT-2022-4313 · Cisco · Cisco Asyncos +1
Name of the Vulnerable Software and Affected Versions: Cisco Secure Web Appliance versions prior to 14.5.0-537 Cisco Secure Web Appliance versions 12.5 and 14.0 updates pending Description: A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance could allow...
CVE-2022-1400 Hardcoded encryption key IV in Exago WebReportsApi.dll
Use of Hard-coded Cryptographic Key vulnerability in the WebReportsApi.dll of Exago Web Reports, as used in the Device42 Asset Management Appliance, allows an attacker to leak session IDs and elevate privileges. This issue affects: Device42 CMDB versions prior to 18.01.00...
PT-2022-22027 · Hulu · Hulu App For Ios
Name of the Vulnerable Software and Affected Versions: Hulu App for iOS versions prior to 3.0.81 Description: The issue improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack. Recommendations: For versions pri...
PT-2022-17525 · Unknown · Cert/Cc Vince
Name of the Vulnerable Software and Affected Versions: CERT/CC VINCE versions prior to 1.50.0 Description: An open redirect issue exists, allowing an attacker to send a specially crafted URL link that, when clicked by an authenticated user, could redirect the user's browser to a malicious site...
VINCE 输入验证错误漏洞
VINCE is a CERT Coordination Center in the United States CERT Coordination Center open source a CERT Coordination Center development and use of vulnerability information and coordination environment. Vulnerability disclosure for improved coordination. An input validation error vulnerability exist...
AZL-10554 CVE-2022-2817 affecting package vim for versions less than 9.0.0325-1
Use After Free in GitHub repository vim/vim prior to 9.0.0213...
CVE-2022-2824
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2152
The Duplicate Page and Post WordPress plugin before 2.8 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
Arvados 代码问题漏洞
Arvados is an open source platform for managing and analyzing biomedical big data. A code issue vulnerability exists in Arvados versions prior to 2.4.1, which stems from insecure deserialization and can be exploited by an attacker to execute arbitrary code via a specially crafted JSON payload...
PT-2022-10222 · Htmldoc +1 · Htmldoc +1
Name of the Vulnerable Software and Affected Versions: htmldoc versions prior to 1.9.12 Description: A buffer overflow issue exists in the write header function in htmldoc, allowing attackers to cause a denial of service. The issue is related to the /htmldoc/htmldoc/html.cxx file at line 273...
CVE-2022-2817 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0213...
OESA-2022-1825 kexec-tools security update
kexec-tools provides /sbin/kexec binary that facilitates a new kernel to boot using the kernel's kexec feature either on a normal or a panic reboot. This package contains the /sbin/kexec binary and ancillary utilities that together form the userspace component of the kernel's kexec feature...