11002 matches found
ABB Mint WorkBench 后置链接漏洞
ABB Mint WorkBench is a single Windows tool from ABB Switzerland that is compatible with the ABB family of motion controllers and servo drives. ABB Mint WorkBench A security vulnerability exists in ABB Mint WorkBench that originates from a vulnerability that allows a low-privilege attacker to...
CVE-2022-32254
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. A customized HTTP POST request could force the application to write the status of a given user to a log file, exposing sensitive user information that could provide valuable guidance to an attacker...
CVE-2022-29522
Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...
PT-2022-3182 · Unknown · Igss Data Server
Name of the Vulnerable Software and Affected Versions: IGSS Data Server - IGSSdataServer.exe versions prior to V15.0.0.22170 Description: A buffer copy without checking the size of input vulnerability exists, potentially leading to a stack-based buffer overflow and remote code execution when an...
NocoDB 跨站脚本漏洞
NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite, and MariaDb into a smart spreadsheet.A cross-site scripting vulnerability exists in versions of NocoDB prior to 0.91.7, which stems from a lack of data validation filtering of user-supplied data and...
Vulnerabilities fixed in Microsoft Azure
Vulnerabilities have been fixed in Microsoft Azure components. A malicious party could exploit the vulnerabilities to obtain elevated privileges, or to gain access to sensitive data in the context of the victim. Microsoft states for several of the vulnerabilities listed below to be in possession ...
CVE-2022-2065
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2060
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0...
PT-2022-21724 · Unknown +1 · Power Distribution Units +1
Name of the Vulnerable Software and Affected Versions: Power Distribution Units running on Powertek firmware versions prior to 3.30.30 Description: The issue concerns an insecure permissions setting on the user.token field, which is accessible through the "/cgi/get param.cgi" HTTP API endpoint...
PT-2022-13310 · WordPress · Advanced Admin Search
Name of the Vulnerable Software and Affected Versions: Advanced Admin Search WordPress plugin versions prior to 1.1.6 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because some parameters are not properly sanitized and escaped before being outputted back...
Couchbase Server 日志信息泄露漏洞
Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase, Inc. that supports data query, full-text search, and active global replication, etc. A log information disclosure vulnerability exists in versions of Couchbase Server prior to 7.0.4, which stems from a...
CVE-2022-2054
Code Injection in GitHub repository nuitka/nuitka prior to 0.9...
CVE-2022-2054
Code Injection in GitHub repository nuitka/nuitka prior to 0.9...
CVE-2022-2054
CVE-2022-2054 affects Nuitka (nuitka/nuitka) prior to 0.9. Descriptions in multiple sources identify a code injection vulnerability with local impact. A patch is indicated to be part of the 0.9 release (or available afterwards) according to OSV/GHSA entries; Nessus notes unpatched status for some...
CVE-2022-2042
Use After Free in GitHub repository vim/vim prior to 8.2...
CVE-2022-2042
Use After Free in GitHub repository vim/vim prior to 8.2...
CVE-2022-2028
Cross-site Scripting XSS - Generic in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2014
Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...
