11002 matches found
CVE-2022-30235
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized access when an attacker uses brute force. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior...
CVE-2022-30232
A CWE-20: Improper Input Validation vulnerability exists that could cause potential remote code execution when an attacker is able to intercept and modify a request on the same network or has configuration access to an ION device on the network. Affected Products: Wiser Smart, EER21000 & EER21001...
CVE-2022-31486
An authenticated attacker can send a specially crafted route to the “editroute.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.303...
CVE-2022-1968
Use After Free in GitHub repository vim/vim prior to 8.2...
AZL-9861 CVE-2022-1215 affecting package libinput for versions less than 1.21.0-1
A format string vulnerability was found in libinput...
Devcert 安全漏洞
Devcert is a package for SSL development from npm, Inc. A denial of service vulnerability exists in versions prior to Devcert 1.2.1, which stems from triggering an exponential ReDoS regular expression denial of service in the Devcert package. An attacker could exploit this vulnerability to cause ...
Max Yi MaxBoard SQL注入漏洞
Max Yi MaxBoard is a CMS Content Management System or web framework from Max Yi, Korea. It helps to make website creation and site management easier and can be easily and conveniently used to build the backend of applications.A SQL injection vulnerability exists in versions prior to Max Yi MaxBoa...
CVE-2021-3555
A Buffer Overflow vulnerability in the RSTP server component of Eufy Indoor 2K Indoor Camera allows a local attacker to achieve remote code execution. This issue affects: Eufy Indoor 2K Indoor Camera 2.0.9.3 version and prior versions...
CVE-2022-1926 Integer Overflow or Wraparound in polonel/trudesk
Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3...
CVE-2022-1934
Use After Free in GitHub repository mruby/mruby prior to 3.2...
CVE-2022-1934 Use After Free in mruby/mruby
Use After Free in GitHub repository mruby/mruby prior to 3.2...
CVE-2022-1931
Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3...
PT-2022-10268 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.1.0 Description: The issue is related to Incorrect Access Control. Recommendations: For versions prior to 7.1.0, update to version 7.1.0 or later to resolve the issue...
Mozilla Thunderbird 资源管理错误漏洞
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A buffer overflow vulnerability exists in Mozilla Thunderbird versions prior to 91.10,...
CVE-2022-1927
Buffer Over-read in GitHub repository vim/vim prior to 8.2...
CVE-2022-1928 Cross-site Scripting (XSS) - Stored in go-gitea/gitea
Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...
CVE-2022-1927 Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2...
CVE-2022-1897
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...