10999 matches found
DEBIAN-CVE-2022-2614
Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-2587
Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit heap corruption via crafted audio metadata...
CVE-2022-2614
Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Hewlett Packard Enterprise Integrated Lights-Out 5 安全漏洞
Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5 is a remote control solution from Hewlett Packard Enterprise. The solution enables remote monitoring and operation of IT assets such as servers. A security vulnerability exists in Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5...
PT-2022-23054 · Bookwyrm · Bookwyrm
Name of the Vulnerable Software and Affected Versions: BookWyrm versions prior to 0.4.5 Description: The issue in BookWyrm is related to tabnabbing, a form of phishing that allows attackers to redirect users to malicious sites through vulnerable links. Recommendations: For versions prior to 0.4.5...
CVE-2022-30633
Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via unmarshalling an XML document into a Go struct which has a nested field that uses the 'any' field tag...
CVE-2022-30630
Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators...
Intel NUC 输入验证错误漏洞
The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in Intel NUC Laptop Kits prior to BC0076, which stems from an incorrect initialization in the firmware that could allow a privileged user to potentially enable privilege escalation via physical access...
kavita 代码问题漏洞
kavita is a fast, feature-rich, cross-platform reading server. A code issue vulnerability exists in kavita versions prior to 0.5.4.1. An attacker could exploit this vulnerability to perform server-side request forgery attacks...
CVE-2022-2730
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2731
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...
PT-2022-18359 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.1 Description: The issue is related to Cross-site Scripting XSS - DOM, which allows an attacker to execute malicious scripts in the browser of a user. This can lead to unauthorized access to sensitive informati...
PT-2022-18375 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.1 Description: The issue concerns Missing Authorization and Improper Privilege Management in the GitHub repository openemr/openemr. Recommendations: For versions prior to 7.0.0.1, update to version 7.0.0.1 or...
OpenEMR 安全漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in OpenEMR versions prior to 7.0.0.1 that stems fr...
PT-2022-23211
Name of the Vulnerable Software and Affected Versions Apache Avro Rust SDK versions prior to 0.14.0 Description The issue allows a Reader to consume memory beyond the allowed constraints, leading to out of memory on the system. This affects Rust applications using the Apache Avro Rust SDK...
PT-2022-18376 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.1 Description: The issue is related to Cross-site Scripting XSS - Reflected. This is a type of security vulnerability that occurs when an application includes user input in its response without properly...
minimist: prototype pollution
An Uncontrolled Resource Consumption flaw was found in minimist. The original fix for CVE-2020-7598 was incomplete as it was still possible to bypass in some cases. This flaw CVE-2021-44906 allows an attacker to trick the library into adding or modifying the properties of Object.prototype, using ...
PT-2023-12901 · Google +1 · Google Chrome +1
Name of the Vulnerable Software and Affected Versions: Google Chrome on Chrome OS and Lacros versions prior to 104.0.5112.79 Description: A use after free issue in Exosphere allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption...