659 matches found
UBUNTU-CVE-2022-23518
rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Versions = 1.0.3, = 2.1.0. This issue is patched in version 1.4.4...
Bluetooth Core Specification 安全漏洞
The Bluetooth Core Specification is a specification. Defines the technical building blocks used by developers to create the interoperable devices that make up the thriving Bluetooth ecosystem. It is overseen by the Bluetooth Special Interest Group SIG and regularly updated and enhanced by the...
IBM MQ Internet Pass-Thru 日志日志信息泄露漏洞
IBM MQ Internet Pass-Thru is an International Business Machines IBM product for supporting the implementation of messaging between remote sites on the Internet. The product is an extended functionality component of IBM MQ that serves as a protocol channel or proxy for establishing protocols durin...
PT-2022-24979 · Unknown · Tsruban Hhims
Name of the Vulnerable Software and Affected Versions: tsruban HHIMS version 2.1 Description: A critical issue has been found in the Patient Portrait Handler component. The manipulation of the PID argument leads to sql injection. This issue can be exploited remotely. Recommendations: For tsruban...
PrestaShop SQL注入漏洞
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image zoom. A security vulnerability exists in PrestaShop versions prior to 2.1.3, which stems from the EU Cookie Law GDPR Banner +...
PT-2022-5635 · Microsoft · Sql Server +3
Name of the Vulnerable Software and Affected Versions: .NET Framework versions prior to the November 2022 update System.Data.SqlClient versions prior to 4.8.5 Microsoft.Data.SqlClient versions prior to 2.1.2 Description: A vulnerability in .NET Framework allows attackers to obtain sensitive...
GPAC 缓冲区错误漏洞
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.1-DEV-rev368-gfd054169b-master, which stems from the function FixSDTPInTRAF in isomedia/isomintern.c was found to contain a heap buffer overflow...
GPAC 安全漏洞
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.1-DEV-rev368-gfd054169b-master, which stems from the gfisommetarestoreitemsref function in /isomedia/meta.c containing a segmentation violation...
Mockery 安全漏洞
Mockery is the mfncooper personal developer's way of providing an easy-to-use API that can be used to hook up mocking without having to mess with the require cache or other Node implementation details. A security vulnerability exists in mfncooper Mockery version 2.1.0, which stems from a prototyp...
Huawei HarmonyOS 缓冲区错误漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. Huawei HarmonyOS version 2.0 and 2.1 of the HwAirlink module are vulnerable to an out-of-bounds read vulnerability that could be exploited by attackers to obtain sensitive...
CVE-2022-3222
Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-38796
A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header. This can be exploited by abusing password reset emails...
CVE-2022-40325
SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR 67262...
ftcms 跨站脚本漏洞
ftcms is a content management system from ftcms, Inc. A security vulnerability exists in ftcms version 2.1, which stems from its poster.PHP page that allows an attacker to insert malicious JavaScript code into a web page, resulting in the triggering of malicious code when a user/administrator...
Carel pCOWeb HVAC BACnet Gateway 路径遍历漏洞
Carel pCOWeb is a programmable control card. A security vulnerability exists in Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware versions A2.1.0 - B2.1.0, Application Software version 2.15.4A, and Software v16 13020200, which stems from the presence of an unauthenticated Arbitrary File Disclosure...
CVE-2022-38180
In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases...
DEBIAN-CVE-2022-2549
NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV...
DEBIAN-CVE-2022-2454
Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV...