2998 matches found
YottaDB 代码问题漏洞
YottaDB is a real-time database from YottaDB, Inc. YottaDB version r1.32 has a security vulnerability that allows an attacker to crash by causing a NULL pointer dereference with a call to ZRead...
PT-2022-18244 · Ghost · Ghost
Name of the Vulnerable Software and Affected Versions: Ghost version 4.39.0 Description: The issue concerns an arbitrary file upload vulnerability in the file upload module, potentially allowing attackers to execute arbitrary code via a crafted SVG file. However, the vendor states that uploading...
Privilege Escalation in API Keys in Grafana
Grafana is an open-source platform for monitoring and observability. When fine-grained access control is enabled and a client uses Grafana API Key to make requests, the permissions for that API Key are cached for 30 seconds for the given organization. Because of the way the cache ID is constructe...
Zyxel VMG3312-T20A 安全漏洞
The Zyxel VMG3312-T20A is a state-of-the-art VDSL2 gateway from China's Heqin Technology Zyxel. A security vulnerability exists in the Zyxel VMG3312-T20A version 5.30ABFX.5C0, which stems from a potential buffer overflow vulnerability found in some internal functions. An authenticated, local...
p0insettia
It is an offensive tool for iOS jailbreak. The tool, named p0insettia, is designed to perform a tethered jailbreak on iOS 10.3.4 32-bit devices, specifically the iPhone 5, using the checkm8 BootROM exploit. The tool is written in C and uses the libcurl library for network operations. The code is...
CVE-2022-26588
A Cross-Site Request Forgery CSRF in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeover via the app/service.php URI...
AZL-9240 CVE-2022-0494 affecting package kernel for versions less than 5.15.37.1-2
A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege CAPSYSADMIN or CAPSYSRAWIO to create issues with confidentiality...
CVE-2022-1030
creationtimestamp| type| source ---|---|--- 2022-03-23 23:28:58+00:00| seen| https://t.me/cibsecurity/39442...
CVE-2021-46064
IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 in 32bit version of the binary. The vulnerability triggers when the user opens malicious .tiff image...
mysql: Server: DML unspecified vulnerability (CPU Apr 2021)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
mysql: InnoDB unspecified vulnerability (CPU Oct 2021)
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
mysql: InnoDB unspecified vulnerability (CPU Apr 2022)
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
Apache HTTP Server 输入验证错误漏洞
Apache HTTP Server is an open source web server from the Apache Foundation. Apache HTTP Server 2.4.52 and earlier versions are vulnerable to an input validation error that results from setting LimitXMLRequestBody to allow request bodies larger than 350MB 1M by default on 32-bit systems, which cou...
PT-2022-26180
Name of the Vulnerable Software and Affected Versions Synapse versions prior to 1.53.0 Description The issue arises when Synapse attempts to generate URL previews for media stream URLs without properly limiting connection time. Connections are only terminated after a certain amount of data max...
CVE-2022-24397
SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability.This reflected cross-site scripting attack can be used to non-permanently deface or modify displayed content of...
CVE-2022-23335
creationtimestamp| type| source ---|---|--- 2022-02-15 00:33:20+00:00| seen| https://t.me/cibsecurity/37466...
CVE-2022-21736
creationtimestamp| type| source ---|---|--- 2022-02-03 14:29:57+00:00| seen| https://t.me/cibsecurity/36761...
PT-2022-12217 · Nec · Univerge Dt 930 +5
Name of the Vulnerable Software and Affected Versions: UNIVERGE DT 820 versions 3.2.7.0 and prior UNIVERGE DT 830 versions 5.2.7.0 and prior UNIVERGE DT 930 versions 2.4.0.0 and prior IP Phone Manager versions 8.9.1 and prior Data Maintenance Tool for DT900 Series versions 5.3.0.0 and prior Data...
OpenSSL 输入验证错误漏洞
OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...