@achingbrain/appmetrics-dash (>=4.0.1 <=4.0.2), @adobe/aio-app-scripts (>=0.6.0 <=2.3.0) +190 more potentially affected by CVE-2020-28471 via properties-reader (>=0.0.10 <=2.1.1)

properties-reader NPM version =0.0.10, =4.0.1, =0.6.0, =2.1.0, =1.0.0, =0.3.1, =1.0.3, =0.6.0, =0.0.3, =0.0.2, =0.1.1, =0.2.0, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =0.1.2, =0.0.1, =0.0.10 and more Source cves: CVE-2020-28471 Source advisory: OSV:GHSA-JXVF-M3X5-MXWQ...

DEBIAN-CVE-2022-2454

Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV...

CVE-2022-2453

Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...

UBUNTU-CVE-2022-2453

Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...

CVE-2022-22304

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests...

DSAB 路径遍历漏洞

DSAB is a data streaming algorithm benchmark. A benchmark designed to test the performance of various data streaming algorithms on multiple datasets in a simple manner. A security vulnerability exists in DSAB version 2.1 and earlier versions, which stems from insecure use of Flask's sendfile...

PT-2022-20528

Name of the Vulnerable Software and Affected Versions prestashop/blockwishlist versions prior to 2.1.1 Description The issue allows an authenticated customer to perform SQL injection. This can be exploited by an attacker to extract or modify sensitive data. The problem is related to the...

Trilogy 安全漏洞

Trilogy is a U.S. GitHub open source for MySQL compatible database server client library . Designed to improve performance , flexibility and ease of embedding . A security vulnerability exists in versions prior to Trilogy 2.1.1 , which stems from the fact that during authentication , a malicious...

MinDoc 代码问题漏洞

MinDoc is a Go-based online document management system based on the beego framework developed by Iminho Personal Developer. A security vulnerability exists in MinDoc v2.1-beta.5, which stems from an arbitrary file upload issue. The vulnerability can be exploited to execute arbitrary commands via ...

UBUNTU-CVE-2022-29189

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could explo...

PT-2022-19441

Name of the Vulnerable Software and Affected Versions Pion DTLS versions prior to 2.1.4 Description The issue concerns a buffer used for inbound network traffic that had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or times out. An...

DEBIAN-CVE-2022-1795

Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV...

CVE-2022-30061

ftcms =2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp...

ftcms 路径遍历漏洞

ftcms is a content management system from ftcms. A security vulnerability exists in ftcms version 2.1 and earlier versions, which can be exploited by an attacker to conduct a directory traversal attack via the tp parameter...

ftcms 安全漏洞

ftcms is a content management system from ftcms Inc. A security vulnerability exists in ftcms version 2.1 and earlier versions, which can be exploited by attackers to execute arbitrary code...

GPAC 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.1-DEV-rev87-g053aae8-master, which originates from an assertion failure of the function BSReadByte in utils/bitstream.c. The vulnerability can be exploited to implement a denial-of-service attack. An...

CVE-2022-1222

Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...

UBUNTU-CVE-2022-1222

Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...

CVE-2022-23881

ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution RCE vulnerability via dangerkey at zzztemplate.php...

EOS 缓冲区错误漏洞

EOS is an open source smart contract platform from the EOSIO community. A buffer error vulnerability exists in EOS that stems from the txntestgenplugin function containing a heap-based buffer overflow. The vulnerability affects the following products: EOS versions prior to v2.1.0...