655 matches found
rsync 输入验证错误漏洞
rsync is an open source utility program by Wayne Davison, an individual developer, that provides fast incremental file transfers. A security vulnerability exists in versions prior to rsync 3.2.5 that stems from insufficient validation of filenames by the rsync client...
CVE-2022-2324
creationtimestamp| type| source ---|---|--- 2022-07-30 00:13:57+00:00| seen| https://t.me/cibsecurity/47300...
CVE-2022-35632
creationtimestamp| type| source ---|---|--- 2022-07-29 20:13:41+00:00| seen| https://t.me/cibsecurity/47266...
CVE-2022-34174
In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, when using the Jenkins user database security realm...
CVE-2022-32974
creationtimestamp| type| source ---|---|--- 2022-06-21 18:27:49+00:00| seen| https://t.me/cibsecurity/44904...
CVE-2022-31356
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business.Online Ordering System version v2.3.2 is vulnerable to SQL injection, which originates from /ordering/index.php?q=category&search=Lack of validation of external input SQL statement validation, an attack...
PT-2022-20391 · Unknown · Tourism Management System
Name of the Vulnerable Software and Affected Versions: Tourism Management System version V 3.2 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For Tourism...
CVE-2021-45982
NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user...
PT-2022-12484 · Netscout · Netscout Ngeniusone
Name of the Vulnerable Software and Affected Versions: NetScout nGeniusONE version 6.3.2 Description: The issue allows Java RMI code execution. Recommendations: For NetScout nGeniusONE version 6.3.2, at the moment, there is no information about a newer version that contains a fix for this issue...
NetScout nGeniusONE 代码注入漏洞
NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A code injection vulnerability exists in NetScout nGeniusONE version 6.3.2, which can be exploited by an attacker to execute Java RMI code...
CVE-2021-42859
A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release...
CVE-2022-30292
Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sqreservestack call...
Northern.tech Mender Enterprise 跨站请求伪造漏洞
Northern.tech Mender Enterprise is a wireless update manager for IoT devices from Northern.tech. A security vulnerability exists in Northern.tech Mender Enterprise prior to version 3.2.2, which stems from a cross-domain websocket hijacking allowed via the Deviceconnect microservice from 1.3.0...
Asterisk 代码问题漏洞
Asterisk is software for a PBX system that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk version 19.x and prior versions of STIR/SHAKEN contain a security vulnerability that originates from the ability to send arbitrary requests e.g., GET to interfaces such as...
TPCMS 跨站脚本漏洞
TPCMS is a content management system.A cross-site scripting vulnerability exists in TPCMS version 3.2, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute arbitrary web script or HTML by injecting a...
TPCMS 日志信息泄露漏洞
TPCMS is an open source content management system from the individual developers at Source of Happiness. A security vulnerability exists in TPCMS version 3.2, which can be exploited by an attacker to access the ThinkPHP log directory and obtain sensitive information such as administrator username...
Firmware Analysis and Comparison Tool 跨站请求伪造漏洞
Firmware Analysis and Comparison Tool FACT is a firmware analysis and comparison tool. firmware Analysis and Comparison Tool version v3.2 contains a cross-site request forgery vulnerability that stems from a WEB application that does not adequately validate that the request is from a trusted user...
CVE-2022-0903
A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body...