CVE-2022-34153

Improper initialization in the IntelR Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

UBUNTU-CVE-2023-0475

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0...

CVE-2023-25653 Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)

node-jose is a JavaScript implementation of the JSON Object Signing and Encryption JOSE for web browsers and node.js-based servers. Prior to version 2.2.0, when using the non-default "fallback" crypto back-end, ECC operations in node-jose can trigger a Denial-of-Service DoS condition, due to a...

Intel Battery Life Diagnostic Tool 安全漏洞

Intel Battery Life Diagnostic Tool is a battery life analysis software from Intel Corporation USA. A security vulnerability exists in Intel Battery Life Diagnostic Tool versions prior to 2.2.0. An attacker can exploit this vulnerability to escalate privileges...

PT-2023-13470 · Intel · Intel Battery Life Diagnostic Tool

Name of the Vulnerable Software and Affected Versions: IntelR Battery Life Diagnostic Tool versions prior to 2.2.0 Description: The issue is related to insufficient control flow management, which may allow an authenticated user to potentially enable escalation of privilege via local access...

SUSE CVE-2018-9264

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the ADB dissector could crash with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-adb.c by checking for a length inconsistency...

CVE-2022-45297

EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...

PT-2023-12595 · Nim +2 · Nim +2

Name of the Vulnerable Software and Affected Versions: Nim versions prior to 1.6.2 NimForum versions prior to 2.2.0 Description: An issue in the RST module of the Nim language stdlib allows the javascript: URI scheme, potentially leading to XSS in some applications. Recommendations: For Nim...

ecto 安全漏洞

ecto is an elixir-ecto open source toolkit for data mapping and language integration queries. A security vulnerability exists in ecto version 2.2.0, which stems from the lack of some kind of protection mechanism...

CVE-2018-25066

A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. ...

Sql injection

A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. ...

CVE-2018-25066 PeterMu nodebatis sql injection

A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. ...

PT-2023-15614 · Unknown · Ntpd Driver

Name of the Vulnerable Software and Affected Versions: ntpd driver component versions prior to 1.3.0 ntpd driver component 2.x versions prior to 2.2.0 Description: The issue allows attackers who control the source code of a different node in the same ROS application to change a robot's behavior...

Cross site scripting

A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...

CVE-2019-25092 Nakiami Mellivora Admin Panel user.inc.php print_user_ip_log cross site scripting

A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...

SICK SIM Series 访问控制错误漏洞

SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in SICK SIM Series 1012 Partnumber 1098146 versions prior to 2.2.0. An attacker accesses a user level defined as RecoverableUserLevel by invoking the password recovery mechanism meth...

PT-2022-27058 · Sick · Sick Sim1012

Name of the Vulnerable Software and Affected Versions: SICK SIM1012 Partnumber 1098146 versions prior to 2.2.0 Description: A password recovery issue allows an unprivileged remote attacker to gain access to the RecoverableUserLevel by invoking the password recovery mechanism method, leading to...

PT-2022-23159 · Sftpgo · Sftpgo

Name of the Vulnerable Software and Affected Versions: SFTPGo versions 2.2.0 through 2.3.3 Description: SFTPGo is a configurable SFTP server with optional HTTP/S, FTP/S, and WebDAV support. It supports login using TOTP Time-based One Time Passwords as a secondary authentication factor and also...

WordPress plugin Coming Soon Landing Page 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2022-23483 · Wellcms · Wellcms

Name of the Vulnerable Software and Affected Versions: Wellcms version 2.2.0 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For Wellcms version 2.2.0, as a...