UBUNTU-CVE-2023-22359

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

DEBIAN-CVE-2023-3013

Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...

DEBIAN-CVE-2023-3012

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2...

PT-2023-24226 · WordPress · Woodiscuz – Woocommerce Comments

Name of the Vulnerable Software and Affected Versions: WooDiscuz – WooCommerce Comments versions through 2.2.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability allows Stored XSS and affects the WooDiscuz – WooCommerce Comments plugin. It...

DEBIAN-CVE-2023-2837

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-2837

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

WordPress Plugin Crayon Syntax Highlighter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

bumsys 跨站脚本漏洞

bumsys is an open source project called Business Management System by unilogies individual developers. A cross-site scripting vulnerability exists in versions of bumsys prior to 2.2.0, which stems from a stored cross-site scripting XSS vulnerability...

PT-2023-20148 · Bumsys · Bumsys

Name of the Vulnerable Software and Affected Versions: bumsys versions prior to 2.2.0 Description: The issue concerns external control of file name or path in the GitHub repository unilogies/bumsys. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issu...

Directus 资源管理错误漏洞

Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A security vulnerability exists in the Directus API version v.2.2.0. A remote attacker could exploit this vulnerability to cause a denial of service via a large number of HTTP requests to the system...

CVE-2023-0228

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...

PT-2023-16713 · Muyucms · Muyucms

Name of the Vulnerable Software and Affected Versions: MuYuCMS version 2.2 Description: A vulnerability was found in MuYuCMS, affecting an unknown functionality of the file "/editor/index.php". The manipulation of the file path argument leads to relative path traversal. The attack can be launched...

PT-2023-20601

Name of the Vulnerable Software and Affected Versions markdown-it-py versions prior to 2.2.0 Description A denial of service could be caused if an attacker is allowed to force null assertions with specially crafted input. Recommendations For versions prior to 2.2.0, update to version 2.2.0 or lat...

PT-2023-20600

Name of the Vulnerable Software and Affected Versions markdown-it-py versions prior to 2.2.0 Description Denial of service could be caused to the command line interface of markdown-it-py if an attacker was allowed to use invalid UTF-8 characters as input. Recommendations For versions prior to...

Intel Battery Life Diagnostic Tool 安全漏洞

Intel Battery Life Diagnostic Tool is a battery life analysis software from Intel Corporation USA. A security vulnerability exists in Intel Battery Life Diagnostic Tool versions prior to 2.2.0, which stems from incorrect initialization. An attacker can exploit this vulnerability to escalate...

jose 安全漏洞

npm jose is an application from the U.S. company npm. JWA, JWS, JWE, JWT, JWK using native encryption runtime without dependencies. A security vulnerability exists in versions prior to jose 2.2.0, which stems from the presence of a denial-of-service DoS vulnerability...

SUSE CVE-2007-2356

Stack-based buffer overflow in the setcolortable function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file...

SUSE CVE-2007-6420

Cross-site request forgery CSRF vulnerability in the balancer-manager in modproxybalancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors...

SUSE CVE-2011-2147

Openswan 2.2.x does not properly restrict permissions for 1 /var/run/starter.pid, related to starter.c in the IPsec starter, and 2 /var/lock/subsys/ipsec, which allows local users to kill arbitrary processes by writing a PID to a file, or possibly bypass disk quotas by writing arbitrary data to a...

SUSE CVE-2016-8614

A flaw was found in Ansible before version 2.2.0. The aptkey module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key...