CVE-2022-41910

TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. We hav...

PT-2022-24233 · Squirrly · Squirrly Seo Plugin

Name of the Vulnerable Software and Affected Versions: SEO Plugin by Squirrly SEO plugin versions 12.1.10 and earlier Description: The issue concerns an arbitrary file upload vulnerability in the SEO Plugin by Squirrly SEO plugin, affecting WordPress. This vulnerability can be exploited by...

Creation of Temporary File With Insecure Permissions

Overview Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions. A knowledgeable local user can locate temporary files created when a scheduled file is read. While they are in use, the user will be able to read the schedule being processed by MPXJ...

CVE-2022-35501

Stored Cross-site Scripting XSS exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function...

Amasty Blog 跨站脚本漏洞

Amasty Blog is a website page extension for Amasty, Inc. A cross-site scripting vulnerability exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plug-ins, which can be exploited by attackers to inject cross-site code and launch XSS attacks...

LibreNMS 代码问题漏洞

LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments, and automatic updates.LibreNMS versions prior to 22.10.0 have a security vulnerability that stems from insufficient sessi...

LibreNMS 跨站脚本漏洞

LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments and automatic updates.LibreNMS versions prior to 22.10.0 have a security vulnerability that stems from the presence of...

PT-2022-26128

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1, 2.9.3, and 2.8.4 Description TensorFlow is an open source platform for machine learning. If FractionMaxPoolGrad is given outsize inputs row pooling sequence and col pooling sequence...

Karmasis Infraskope Agent 访问控制错误漏洞

Karmasis Infraskope Agent is an application logger from Karmasis. An Access Control Error vulnerability exists in Karmasis Infraskope Agent versions prior to 7.10.00, which stems from improper access control in the application and can be exploited by an attacker to corrupt the page listing the...

WordPress plugin WPML Multilingual CMS premium 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WPML Multilingual CMS premium plugin 4.5.10 and earlier versions are vulnerable to an acces...

WordPress plugin Quiz And Survey Master 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Quiz And Survey Master 7.3.10 and earlier versions contain a security vulnerability. An attacker...

Keyfactor EJBCA 跨站脚本漏洞

EJBCA is an open source Public Key Infrastructure PKI and Certificate Authority CA software from Keyfactor Open Source. A cross-site scripting vulnerability exists in Keyfactor EJBCA versions prior to 7.10.0 that stems from allowing XSS...

Lancet 路径遍历漏洞

Lancet is a comprehensive, efficient and reusable go utility library by DuDaoDong's personal developer. A path traversal vulnerability exists in Lancet v1.9.02.001 versions 2.1.10 and 1.3.4, which stems from a ZipSlip issue when extracting files using the fileutil package...

Veritas Technologies NetBackup 操作系统命令注入漏洞

Veritas Technologies NetBackup is a storage service from Veritas Technologies, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual environments, and other environmental...

November 15, 2022—KB5020030 (OS Builds 19042.2311, 19043.2311, 19044.2311, and 19045.2311) Preview

None None...

PT-2022-35438 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.153 Description: The issue concerns several use-after-free bugs in the fbdev: smscufx component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PortlandLabs Concrete CMS 授权问题漏洞

PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. in the United States. A security vulnerability exists in Concrete CMS concrete5 versions prior to 8.5.10 and versions 9.0.0 through 9.1.2, which stems from a new session ID not being issued...

PT-2022-35577 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A potential memory leak issue has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.10.150, update...

PT-2022-35435 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.153 Description: The issue concerns a possible memory leak in the snd ac97 dev register function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35373 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.15.74 Description: The issue concerns reading strings from synthetic events. It was introduced in version v5.10 and fixed in version v5.15.75. The actual impact and attack plausibility have not yet been...