Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A buffer error vulnerability exists in System in Google Android versions prior to 10, 11, 12, and 12L. No information about this vulnerability is available at this time, so stay tuned to CNNVD or...

jmespath.rb 安全漏洞

jmespath.rb is the Ruby implementation of JMESPath. A security vulnerability exists in jmespath.rb versions prior to 1.6.1. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Pixel Modem in Google Android. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Pixel Modem in Google Android. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...

PT-2022-23715 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche version 6.3.2.3490 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can be...

PT-2022-2764

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.18.1 Description The issue is related to an incorrect NFT STATEFUL EXPR check in the net/netfilter/nf tables api.c file, leading to a use-after-free condition. This allows a local user, who is able to create...

PT-2022-3463 · Open Automation · Open Automation Software Oas Platform

Name of the Vulnerable Software and Affected Versions: Open Automation Software OAS Platform version V16.00.0112 Description: The issue concerns the OAS Engine SecureAddSecurity functionality, where a lack of authentication check for a critical function can be exploited. An attacker can send a...

PT-2022-19358 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Diary Management System version 1.0 Description: The Diary Management System contains a cross-site scripting XSS issue via the Name parameter in the "search-result.php" endpoint. This allows for potential malicious script injection...

CVE-2022-1480

No description is available for this CVE...

WordPress plugin Popup Box 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress Pop...

TIETEN Acronis Cyber Protect 安全漏洞

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect suffers from a security vulnerability...

PT-2022-19144 · Canonical +1 · Apport +2

Name of the Vulnerable Software and Affected Versions: apport affected versions not specified Description: The issue allows users to fill up apport.log. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

PT-2022-19967 · Hms · Hms

Name of the Vulnerable Software and Affected Versions: HMS version 1.0 Description: The issue is related to a SQL injection vulnerability. When requesting "appointment.php" through POST, multiple parameters can lead to this vulnerability. Recommendations: For HMS version 1.0, as a temporary...

squirrel 缓冲区错误漏洞

squirrel is the stable version of the programming language SQUIRREL 3.2. A security vulnerability exists in squirrel version 3.2, which stems from the lack of a specific sqreservestack call to threadcall in sqbaselib.cpp. No detailed vulnerability details are currently available...

Zammad 安全漏洞

A security vulnerability exists in Zammad, a suite of ticket management software from the German company Zammad, which stems from an administrative configuration that broadcasts settings that should only be visible to authenticated users to all users with an active application instance. No detail...

IBM QRadar SIEM 授权问题漏洞

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An authorization...

PT-2022-17224 · Kyocera · Kyocera D-Color Mf3555

Name of the Vulnerable Software and Affected Versions: Kyocera d-COLOR MF3555 version 2XD S000.002.271 Description: The Web Application is affected by Broken Access Control, which does not properly validate requests for access to data and functionality under the /mngset/authset path. This allows ...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, a US-based company. mattermost has a security vulnerability and no details of the vulnerability are available at this time...

Microsoft Office Sharepoint Server安全漏洞

Microsoft SharePoint is a suite of enterprise business collaboration platforms from Microsoft Corporation USA. Microsoft SharePoint Server is vulnerable to spoofing and no details of the vulnerability are currently available...

PT-2022-2813 · Microsoft · Windows Appx Package Manager +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Package Manager affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows AppX Package Manager, which can be exploited to elevate privileges. This allows an attacker to...