CVE-2022-22828

An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...

CVE-2022-0387 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

PT-2022-1461 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.7 Description: The issue is related to reflected cross-site scripting in GLPI, a free asset and IT management software package. This can allow a remote attacker to perform cross-site scripting attacks by exploiting...

CVE-2022-0368

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

Design/Logic Flaw

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-0379

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0362

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

CVE-2022-0251 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.2.10...

CVE-2022-0374

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

GHSA-39PH-WR67-J4XQ loguru logs sensitive information

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3...

VulnCheck KEV: CVE-2019-9546

SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service...

CVE-2022-0368

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior 7.5.24 and prior 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).

...

WordPress 跨站请求伪造漏洞

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. cross-site request forgery vulnerability exists in versions prior to 1.7.8 of the Qubely plugin for WordPress, which...

WordPress Smart SEO Tool 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blogging sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions prior to 3.0.6 of the Smart SEO Tool plugin for WordPress, which...

PT-2022-6345 · Casdoor · Casdoor

Name of the Vulnerable Software and Affected Versions: Casdoor versions prior to 1.13.1 Description: The query API in Casdoor has a SQL injection issue related to the field and value parameters. This is demonstrated by the "api/get-organizations" endpoint. The vulnerability may allow a remote...

Race condition

A race condition was found in the Linux kernel's ebpf verifier between bpfmapupdateelem and bpfmapfreeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege capsysadmin or capbpf can modify the frozen mapped address space. This flaw affects kernel...

DEBIAN-CVE-2022-0319

Out-of-bounds Read in vim/vim prior to 8.2...

Heap overflow

Heap-based Buffer Overflow in vim/vim prior to 8.2...

PT-2022-6880 · File +6 · File +6

Name of the Vulnerable Software and Affected Versions: File versions prior to 5.43 Description: The issue is related to a stack-based buffer over-read in the file copystr function in funcs.c, which can lead to a denial of service when a specially crafted file is used. This can be exploited by an...