TYPO3 跨站脚本漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in TYPO3 Grid Elements versions 7.0.0 - 10.2.0 that originates from insufficiently cleansed user-supplied data. A remote user can trick a victi...

TYPO3 SQL注入漏洞

TYPO3 is a content management system framework CMS/CMF from the Swiss TYPO3 Association.TYPO3 One is Enough Library 4.1.5 and earlier versions are vulnerable to SQL injection, which stems from inadequate cleaning of user-supplied data. A remote attacker could use this vulnerability to send a...

CVE-2022-29077

A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remotely on a rippled node, which may lead to XRPL mainnet DoS or compromise. This exposes all digital assets on the XRPL to a security threat...

The vulnerability of the php_handler function (sapi/apache2handler/sapi_apache2.c) in the PHP programming language allows a perpetrator to execute arbitrary code.

The vulnerability of the phphandler function sapi/apache2handler/sapiapache2.c in the Apache HTTP Server, a PHP programming language interpreter, exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Fedora 35 : vim (2022-e304fffd34)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e304fffd34 advisory. The newest upstream commit Security fixes for CVE-2022-1381, CVE-2022-1420 Tenable has extracted the preceding description block directly from the...

WordPress VikBooking Hotel Booking Engine & PMS plugin arbitrary file upload vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. The WordPress VikBooking Hotel Booking Engine & PMS plugin is vulnerable to arbitrary file uploads due to...

The vulnerability of the distributed database management system Apache Cassandra, related to improper code generation, allows a hacker to execute arbitrary code on the host.

The vulnerability of the distributed database management system Apache Cassandra is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the host remotely...

The vulnerability of the simplestring_addn function in the PHP programming language allows a hacker to execute arbitrary code.

The vulnerability of the simplestringaddn function in the PHP programming language arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the StarOS operating system arises from the improper activation of the debugging mode for certain services, allowing a perpetrator to execute arbitrary code.

The vulnerability of the StarOS operating system exists due to the incorrect activation of the debugging mode for certain services. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

vim buffer overflow vulnerability (CNVD-2022-55222)

vim is a UNIX-based editor. vim versions prior to 8.2.4763 contain a buffer overflow vulnerability that stems from a failure to properly validate data boundaries when performing operations on memory in the software skiprange. An attacker could exploit this vulnerability to cause a software crash,...

[SECURITY] [DLA 2984-1] condor security update

Debian LTS Advisory DLA-2984-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 19, 2022 https://wiki.debian.org/LTS Package : condor Version : 8.4.11dfsg.1-1+deb9u2 CVE ID : CVE-2022-26110 Debian Bug : 1008634 Jaime Frey discovered a flaw in HTCondor, a...

The vulnerability of the load_cache function in the GIMP graphic editor allows a hacker to transfer special application data and execute arbitrary OS commands on the target system.

The vulnerability of the loadcache function in the GIMP graphic editor exists because measures to neutralize the special elements used in the operating system command are not taken. Exploiting this vulnerability allows a malicious actor to transmit special application data and execute arbitrary O...

AZL-9487 CVE-2022-1381 affecting package vim for versions less than 8.2.4925-1

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CVE-2022-1381

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CVE-2022-1381

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

Heap overflow

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CVE-2022-1381

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

The vulnerability of the Network File System (NFS) of the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Network File System NFS of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created NFS network message protocol...

vim 缓冲区错误漏洞

vim is a UNIX-based editor. vim versions prior to 8.2.4763 contain a buffer overflow vulnerability that stems from a failure to properly validate data boundaries when performing operations on memory in the software skiprange. An attacker could exploit this vulnerability to cause a software crash,...

CVE-2022-1381

CVE-2022-1381 pertains to Vim/ vim in which a global heap buffer overflow occurs in the skip_range function. Public advisories and vendor bulletins indicate this affects Vim prior to a specific 8.2.x release (e.g., Mariner/ALAS advisories cite Vim versions below 8.2.4925-1 and note an upgrade to ...