11002 matches found
URL Redirection to Untrusted Site ('Open Redirect')
Impact Releases prior to 3.0.1 are vulnerable to an open redirect vulnerability that allows an attacker to construct a URL that redirects to an arbitrary external domain. Patches 3.0.1 contains a fix for this vulnerability. The 1.x and 2.x releases are not maintained anymore. References...
CVE-2022-0690
Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0632
NULL Pointer Dereference in Homebrew mruby prior to 3.2...
CVE-2022-0630
Out-of-bounds Read in Homebrew mruby prior to 3.2...
CVE-2022-0666 CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
CVE-2020-8107
A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions pri...
Pexip Infinity 信任管理问题漏洞
Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. The product provides high quality and secure cloud conferencing capabilities.A security vulnerability exists in versions of Pexip Infinity...
CVE-2022-0638
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0629
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
CVE-2022-0623
Out-of-bounds Read in Homebrew mruby prior to 3.2...
CVE-2022-0623
Out-of-bounds Read in Homebrew mruby prior to 3.2...
CVE-2022-0623
Out-of-bounds Read in Homebrew mruby prior to 3.2...
HPESBST04254 rev.1 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v8.0.1b and v7.4.1d, Disclosure of Privileged Information
Potential Security Impact: Remote: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN6000B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN3600B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN4000B SAN Extension Switch...
CVE-2022-0559 Use After Free in radareorg/radare2
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2...
CVE-2022-0612 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
PT-2022-13299 · Uri.Js · Uri.Js
Name of the Vulnerable Software and Affected Versions: urijs versions prior to 1.19.8 Description: The issue allows an attacker to bypass authorization through a user-controlled key. Specifically, it is possible to use case-insensitive protocol schemes, such as HTTP, htTP, HTtp, etc., to bypass...
litespeed.js 安全漏洞
litespeed.js is a lean and fast micro JavaScript framework. A security vulnerability exists in litespeed.js prior to version 0.3.12, which stems from a Prototype Pollution vulnerability when parsing a query string in the getJsonFromUrl function, where keys set in the result object are not properl...
Vim Buffer Overflow Vulnerability (CNVD-2022-11175)
Vim is a UNIX-based editor. buffer overflow vulnerability exists in versions of Vim prior to 8.2, which stems from a heap overflow in exretab. An attacker could exploit this vulnerability to execute arbitrary code...
AZL-33639 CVE-2022-21698 affecting package rook for versions less than 1.6.2-18
clientgolang is the instrumentation library for Go applications in Prometheus, and the promhttp package in clientgolang provides tooling around HTTP servers and clients. In clientgolang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and...