PT-2022-5417 · Corel · Coreldraw Graphics Suite

Name of the Vulnerable Software and Affected Versions: Corel CorelDRAW Graphics Suite version 23.5.0.506 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

DRUPAL-CONTRIB-2022-008

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read:...

CVE-2022-23837

In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users...

CVE-2022-23837

In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users...

Moddable SDK 安全漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, U.S. A security vulnerability exists in Moddable SDK v11.5.0, which was discovered to contain a SEGV vulnerability via the component fini. No details of the vulnerability are currently available...

Discourse 信息泄露漏洞

Discourse is an open source community discussion platform that includes community, email and chat room features. The platform includes community, email, and chat room features.Discourse is vulnerable to an information disclosure. No detailed vulnerability details are available at this time...

nanoid 代码问题漏洞

nanoid is a small, secure, URL-friendly, unique string ID generator for JavaScript. nanoid is vulnerable, stemming from nanoid's vulnerability to information exposure via the valueOf function, which allows the last generated id to be reproduced. no details of the vulnerability are currently...

GitLab 信息泄露漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. There is an information disclosure vulnerability in GitLab, no more informatio...

PT-2022-1499 · Microsoft · Windows User Profile Service +1

Name of the Vulnerable Software and Affected Versions: Windows User Profile Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows User Profile Service, which can be exploited to elevate privileges. This allows an attacker to affe...

PT-2022-1524 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Cleanup Manager. It is caused by incorrect link resolution before accessing a file. Exploitation of this issue...

CVE-2021-40001

The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be unavailable...

Path traversal

The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be unavailable...

libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. libde265 is vulnerable to an access control error, and no detailed vulnerability details are currently available...

Libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. libde265 suffers from a buffer overflow vulnerability that stems from Cc functionally backing off epel hv when running the program dec265. No detailed vulnerability details are currently available...

PT-2022-10512 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A heap-based buffer overflow issue exists in MP4Box via the gp rtp builder do mpeg12 video function, allowing attackers to have unspecified impact through a crafted file in the MP4Box command. Recommendations:...

Microsoft Edge 跨站脚本漏洞

Microsoft Edge is a Web browser that comes with the post-Windows 10 version of the U.S. Microsoft Edge is vulnerable to remote code execution. No detailed vulnerability details are available at this time...

Microsoft Edge 跨站脚本漏洞

Microsoft Edge is a Web browser that comes with the post-Windows 10 version of the U.S. Microsoft Edge is vulnerable to remote code execution. No detailed vulnerability details are available at this time...

Roundcube Webmail 跨站脚本漏洞

Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message search, spell checking, etc. A cross-site scripting vulnerability exists in Roundcube Webmail, and no detailed vulnerability details are currently available...

Microsoft Edge 跨站脚本漏洞

Microsoft Edge is a Web browser that comes with the post-Windows 10 version of Microsoft Corporation Microsoft. No details of the vulnerability are currently available...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS 2.0, which stems from a samba server boundary overflow vulnerability in the system file management module...