11002 matches found
CVE-2022-1909 Cross-site Scripting (XSS) - Stored in causefx/organizr
Cross-site Scripting XSS - Stored in GitHub repository causefx/organizr prior to 2.1.2200...
PT-2022-3311 · D Link · D-Link Dir-890L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-890L versions prior to DIR890LA1 FW107b09.bin Description: The issue is related to a stack-based buffer overflow vulnerability in the LAN-side Web-Configuration Interface of the D-Link Wi-Fi router firmware. This vulnerability is...
Organizr 跨站脚本漏洞
Organizr is a tab management system. It is intended to be a one-stop store for server front-ends. A security vulnerability exists in Organizr versions prior to 2.1.2200 that stems from the presence of a cross-site scripting vulnerability...
PT-2022-3422
Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.0.9.1 Rack versions prior to 2.1.4.1 Rack versions prior to 2.2.3.1 Description A possible denial of service vulnerability exists in the multipart parsing component of Rack. This issue is related to insufficient checki...
CVE-2022-1897 Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...
CVE-2022-1898
Use After Free in GitHub repository vim/vim prior to 8.2...
CVE-2022-1897
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...
CVE-2022-1898 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 8.2...
CVE-2022-1899
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0...
MariaDB Server Denial of Service Vulnerability (CNVD-2022-65345)
MariaDB is a database management system from the Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine. A denial of service vulnerability exists in versions of MariaDB Server prior to 10.7, which stems from the execution of the logstatementex method, the...
CVE-2022-1883
SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0...
CVE-2022-1851
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
CVE-2022-1851 Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52260)
GNU LibreDWG is a C library for processing DWG files from the GNU community.A heap buffer overflow vulnerability exists in versions of GNU LibreDWG prior to 0.12.4, which stems from a boundary error in copybytes of decoder2007.c when handling untrusted input. No detailed vulnerability details are...
CVE-2021-32965
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to type confusion, which may allow an attacker to remotely execute arbitrary code...
GHSA-W2HV-RCQR-2H7R View name validation bypass in Jenkins
Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name. When a form to create a view is submitted, the name is included twice in the submission. One instance is validated, but the other instance is used to create the value. This...
GHSA-W8CC-3H7Q-JHC3 Mattermost Server has low entropy for authorization data as an OAuth 2.0 Service Provider
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. There is low entropy for authorization data...
GHSA-H3QG-W9J5-WH3M Mattermost Server is vulnerable to XSS through lack of link relationship attributes `noreferrer` and `noopener`
An issue was discovered in Mattermost Server before 3.1.0. It allows XSS because the noreferrer and noopener protection mechanisms were not in place...
CVE-2022-1809
Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0...
Google TensorFlow code issue vulnerability (CNVD-2022-44171)
Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. Google TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4 are vulnerable to a code issue stemming from tf.rawops. QuantizedConv2D does not fully validate input parameters. No detailed...