11002 matches found
WordPress plugin WP Duplicate Page 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress WP Duplicate Page plugin prior to 1.3 are vulnerable to a cross-site scripting...
PT-2022-20515 · Kubeedge · Kubeedge
Name of the Vulnerable Software and Affected Versions: KubeEdge versions prior to 1.11.1 KubeEdge versions prior to 1.10.2 KubeEdge versions prior to 1.9.4 Description: A large response received by the viaduct WSClient can cause a denial of service DoS from memory exhaustion. The entire body of t...
PT-2022-20296 · Unknown · Isemtelephony
Name of the Vulnerable Software and Affected Versions: isemtelephony versions prior to SMR Jul-2022 Release 1 Description: The issue is related to improper authorization, allowing an attacker to obtain CID without the necessary ACCESS FINE LOCATION permission. Recommendations: For versions prior ...
CVE-2019-5847
Inappropriate implementation in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-2345 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0046...
CVE-2022-26078
Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address. This issue affects: Gallagher Gallagher Controller 6000 vCR8.60 versions prior to 220303a; vCR8.50 versions prior to 220303a; vCR8.40 versions prior to 220303a; vCR8.30...
CVE-2022-26078
Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address. This issue affects: Gallagher Gallagher Controller 6000 vCR8.60 versions prior to 220303a; vCR8.50 versions prior to 220303a; vCR8.40 versions prior to 220303a; vCR8.30...
CVE-2021-3696
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of...
DEBIAN-CVE-2021-3697
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...
CVE-2021-3697
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...
UBUNTU-CVE-2021-3696
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of...
CVE-2021-23163
JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF Cross-Site Request Forgery for specific endpoints. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.33.6 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6...
Roxy-WI 注入漏洞
Roxy-WI is an open source web interface for managing Haproxy, Nginx and Keepalived servers. An injection vulnerability exists in Roxy-WI versions prior to 6.1.1.0. An unauthenticated, remote attacker could send a specially crafted HTTP request to the /app/options.py file to execute code via this...
Memory Out-of-Bounds Read Vulnerability in Libmobi Versions Prior to 0.11
Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. A memory out-of-bounds read vulnerability exists in Libmobi versions prior to 0.11, which can be exploited by attackers to obtain sensitive information...
Double free
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is...
CVE-2022-34876
SQL Injection vulnerability in admin interface /vicidial/admin.php of VICIdial via modifyemailaccounts, accessrecordings, and agentcallemail parameters allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, destroy the data or make i...
CVE-2022-2285
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...
chafa 缓冲区错误漏洞
chafa is a command line utility program for individual developers. A security vulnerability exists in versions prior to chafa 1.10.3, which stems from a buffer over-read...
WordPress plugin Ninja Forms Contact Form 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
