60 matches found
WithSecure 安全漏洞
WithSecure products is a series of security software from the Finnish company WithSecure. A security vulnerability exists in WithSecure version 2022-08-10 and earlier versions. An attacker has exploited the vulnerability to cause a denial of service on the system...
PT-2022-25388 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: ZZCMS version 2022 Description: An absolute path traversal issue allows attackers to obtain sensitive information via a crafted GET request sent to "/one/siteinfo.php". Recommendations: For ZZCMS version 2022, as a temporary workaround,...
PT-2022-25449 · Ansys · Ansys Spaceclaim
Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...
PT-2022-6559 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: ZZCMS version 2022 Description: The issue is related to a SQL injection vulnerability in the ZZCMS system, specifically in the admin/sendmailto.php component. This vulnerability arises from the lack of protection against SQL query structure...
DokuWiki 跨站脚本漏洞
DokuWiki is an easy-to-use and versatile open source Wiki software. A cross-site scripting vulnerability exists in DokuWiki before version 2022-07-31a...
Subreption Gumstix Overo SBC 缓冲区错误漏洞
The Subreption Gumstix Overo SBC is a touch substrate from Subreption USA. A security vulnerability exists in Subreption Gumstix Overo SBC version 2022-08-09 and prior versions, which stems from a vulnerability that allows unrestricted remapping of NOR flash memory containing an FPGA bitstream...
iasset 路径遍历漏洞
iasset is a repository by Ralph Zhang, a personal developer. iasset has a security vulnerability in version 2022-05-04 and earlier that stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...
Harveyzyh Python 路径遍历漏洞
Harveyzyh Python is a private codebase. A security vulnerability exists in GitHub's Harveyzyh/Python version 2022-05-04 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...
IdeaTMS SQL注入漏洞
IdeaTMS is a content platform. A security vulnerability exists in IdeaTMS version 2022 that stems from IdeaTMS being susceptible to SQL injection attacks via PATHINFO...
Idea IdeaLMS Cross-Site Scripting Vulnerability
IdeaLMS is an educational and learning management software from Idea. A cross-site scripting vulnerability exists in Idea IdeaLMS version 2022, which can be exploited by an attacker to execute JavaScript code on the client side...
IdeaLMS 跨站脚本漏洞
IdeaLMS is an educational and learning management software from Idea. A cross-site scripting vulnerability exists in Idea IdeaLMS version 2022, which can be exploited by an attacker to execute JavaScript code on the client side...
Autodesk 3ds Max 缓冲区错误漏洞
Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the US-based Autodesk, Inc. A security vulnerability exists in Autodesk 3ds Max versions 2022 and 2021, which originates from a maliciously crafted TIF file that can be used to write beyond the allocated buffer...
Idea LMS SQL Injection Vulnerability
Idea LMS is a CMS. A SQL injection vulnerability exists in Idea LMS version 2022, which can be exploited by an attacker to execute illegal SQL commands to steal sensitive database data...
AZL-9846 CVE-2022-30783 affecting package ntfs-3g for versions less than 2022.5.17-1
An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...
Survey Sparrow Enterprise Survey Software 跨站脚本漏洞
Survey Sparrow Enterprise Survey Software is an enterprise survey software from Survey Sparrow, Inc. A cross-site scripting vulnerability exists in Survey Sparrow Enterprise Survey Software version 2022, which stems from a lack of data validation filtering in the Signup parameter is missing a dat...
PT-2022-19716 · Microstrategy · Microstrategy Enterprise Manager
Name of the Vulnerable Software and Affected Versions: MicroStrategy Enterprise Manager version 2022 Description: The issue allows authentication bypass by triggering a login failure and then entering a specific substring for directory traversal. This can be achieved by entering...
PyScript 安全漏洞
PyScript is a framework for writing interactive web applications in PyScript. A security vulnerability exists in PyScript version 2022-05-04 and prior versions. An attacker can exploit this vulnerability to remotely read or disclose Python source code...
CVE-2021-41119
Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...
Adobe Illustrator 代码问题漏洞
Adobe Illustrator is a vector graphics editor and design program. Adobe Illustrator 2022 25.4.1 and earlier versions are vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service in the application...
Adobe Illustrator 缓冲区错误漏洞
Adobe Illustrator is a vector graphics editor and design program. An out-of-bounds read vulnerability exists in Adobe Illustrator 2022 25.4.1 and earlier versions. An attacker can exploit the vulnerability to cause a memory leak...