CVE-2022-23698

A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView versions: Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView...

Cross site scripting

A remote cross-site scripting xss vulnerability was discovered in HPE OneView versions: Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView...

PT-2022-7719 · Unknown · Pro2Col Stingray Fts

Name of the Vulnerable Software and Affected Versions: Pro2col Stingray FTS affected versions not specified Description: A problematic issue has been found in the software, where the manipulation of the Username argument leads to cross-site scripting. The attack can be initiated remotely. It is...

IPCOMM ipDIO 跨站脚本漏洞

IPCOMM ipDIO is a remote control communication device from IPCOMM Germany. It is used to record digital and analog inputs and control digital outputs. A cross-site scripting vulnerability exists in IPCOMM ipDIO that allows an unauthenticated, remote attacker to exploit the vulnerability to...

CVE-2021-41002

Multiple authenticated remote path traversal vulnerabilities affect the AOS-CX command-line interface on Aruba CX 6200F, 6300, 6400, 8320, 8325, 8400, and 8360 switch series. The listed vulnerable versions include AOS-CX 10.06.xxxx (≤10.06.0170), 10.07.xxxx (≤10.07.0050), 10.08.xxxx (≤10.08.1030)...

CVE-2021-44747

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the...

HPE OneView Global Dashboard 跨站脚本漏洞

HPE OneView Global Dashboard OVGD is a suite of dashboard solutions from Hewlett Packard Enterprise hpe. A security vulnerability exists in HPE OneView Global Dashboard that stems from the discovery of a remote cross-site scripting vulnerability in HPE OneView Global Dashboard version:prior to 2....

HPE Integrated Lights-Out 4 注入漏洞

HPE Integrated Lights-Out 4 iLO 4 is a remote control solution from Hewlett Packard Enterprise hpe. The solution enables remote monitoring and operation of IT assets such as servers. HPE Integrated Lights-Out 4 suffers from an injection vulnerability that stems from a potential remote host header...

CVE-2022-24368

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-24060

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-24705

The radpacketrecv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed buffer that causes a buffer overflow and overwrites arbitrary memory. If the server connects with a malicious client, crafted client requests can remotely trigge...

WordPress plugin VeronaLabs WP Statistics SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin VeronaLabs WP...

AlmaLinux 8 : libvorbis (ALSA-2019:3703)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2019:3703 advisory. - mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of...

PT-2022-1711 · Microsoft · Windows Services For Nfs +1

Name of the Vulnerable Software and Affected Versions: Windows Services for NFS affected versions not specified Description: The issue is related to an information disclosure vulnerability in the NFS ONCRPC XDR Driver of Windows Services for NFS. This vulnerability can be exploited by a remote...

Emerson DeltaV Improper Permissions, Privileges, and Access Controls (CVE-2012-1818)

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors. This plugin only works with Tenable.ot. Please visit...

Nvidia Omniverse Launcher 代码问题漏洞

Nvidia Omniverse Launcher is an easily extensible open platform from Nvidia. It is built for virtual collaboration and real-time physically accurate simulations. NVIDIA Omniverse Launcher has a security vulnerability that can be exploited by remote attackers to browse malicious websites and obtai...

Santesoft DICOM Viewer Pro 安全漏洞

Sante DICOM Viewer Pro is a medical DICOM image viewer.A remote code execution vulnerability exists in Sante DICOM Viewer Pro JP2, which can be exploited by attackers to execute code in the context of the current process...

Mageia: Security Advisory (MGASA-2020-0146)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of NETGEAR GS108Tv2 and GS110TPv2 microprogramming devices lies in the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of NETGEAR GS108Tv2 and GS110TPv2 microprogrammed software devices is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of Adobe Premiere Rush software, related to the use of uninitialized memory, allows attackers to escalate their privileges.

The vulnerability of Adobe Premiere Rush relates to the use of uninitialized memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...