PT-2022-2664

Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description The issue is related to incorrect code generation management in Microsoft Excel. It allows a remote attacker to execute arbitrary code. Recommendations At the moment, there is no...

Microsoft Azure Site Recovery 信息泄露漏洞

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an information disclosure vulnerability, and no details of the vulnerability are available...

InHand Networks InRouter 900 操作系统命令注入漏洞

The InHand Networks InRouter 900 is a series of industrial routers from InHand Networks, U.S.A. A security vulnerability exists in the InHand Networks InRouter 900 Industrial 4G Router, and no details of the vulnerability are currently available...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 代码问题漏洞

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 is a digital blood pressure monitor and tester from Dr Trust. Dr Trust USA iCheck Connect BP Monitor BP Testing 118 is vulnerable to a code issue, no details of the vulnerability are available at this time. Details of the vulnerability are not...

The vulnerability of Xen hypervisors relates to the execution of a loop with an unavailable exit condition, allowing a malicious actor to cause a service failure.

The vulnerability of Xen hypervisors relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows an attacker to cause a service failure...

Calibre-Web 代码问题漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A code issue vulnerability exists in Calibre-Web 0.6.18, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

Vulnerability found in Atlassian Confluence Datacenter

A vulnerability has been found in Atlassian Confluence Datacenter. An unauthenticated malicious party could potentially exploit the vulnerability potentially exploit it to execute arbitrary code. Confluence Datacenter systems are only vulnerable when using the cluster functionality. Confluence...

McAfee Epolicy Orchestrator 授权问题漏洞

McAfee Epolicy Orchestrator McAfee Epo is a U.S.-based solution for managing endpoint, network, data security, and compliance. A security vulnerability exists in McAfee Epolicy Orchestrator, no information about the vulnerability is available at this time, please stay tuned to CNNVD or vendor...

Open-xchange OX App Suite 跨站脚本漏洞

Open-xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange Open-xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-xchange OX App Suite version 7.10.5 and prior...

IBM MQ Appliance 安全漏洞

The IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM U.S.A. A security vulnerability exists in the IBM MQ Appliance, which stems from a fatal error in the IBM MQ Appliance through authorization checking, which triggers a denial of...

GHSA-9GQR-XP86-F87H Code injection in npm git

All versions of package git are vulnerable to Remote Code Execution RCE due to missing sanitization in the Git.git method, which allows execution of OS commands rather than just git commands. At this time, there is no known workaround. There has been no patch released...

WordPress plugin Responsive Menu 代码问题漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. WordPress plugin Responsive Menu has a security vulnerability...

CVE-2022-21822

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable...

CVE-2022-21822

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable...

CVE-2022-21822

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable...

Veeam Backup&Replication 访问控制错误漏洞

Veeam Backup & Replication is a suite of data protection software from the Swiss company Veeam. The software provides backup, replication and recovery for VMware and Hyper-V VMs, physical and cloud environments. Veeam Backup&Replication is vulnerable to an Access Control Error vulnerability, no...

Red Hat Data Grid 安全漏洞

Red Hat Data Grid is a memory-based Nosql database with distributed support from Red Hat. A security vulnerability exists in Red Hat Data Grid. No information about the vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

Yandex ClickHouse 缓冲区错误漏洞

Yandex ClickHouse is a set of open source columnar databases for online analytical processing from the Russian company Yandex. A buffer error vulnerability exists in Yandex ClickHouse, no information about the vulnerability is available at this time, please stay tuned to CNNVD or vendor...