4657 matches found
CVE-2022-1307
Inappropriate implementation in full screen in Google Chrome on Android prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2022-2189
The WP Video Lightbox WordPress plugin before 1.9.5 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...
otp-generator 安全特征问题漏洞
otp-generator is a simple one-time password generator from the individual developer Maheshkumar Kakade. A security vulnerability exists in otp-generator versions prior to 3.0.0 that stems from insecure random one-time passwords being generated.The package is susceptible to insecure randomization,...
CVE-2022-24294
A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...
CVE-2022-34981
The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party...
CVE-2022-2493
Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-21575
Vulnerability in the Oracle WebCenter Sites Support Tools product of Oracle Fusion Middleware component: User Interface. The supported version that is affected is Prior to 4.4.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
CVE-2022-21554
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.36. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...
CVE-2021-44170
A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...
CVE-2022-27932
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join...
CVE-2022-26657
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join...
WordPress plugin Shortcodes and extra features for Phlox 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. WordPress Shortcodes and extra features for Phlox plugin versions prior to 2.9.8 contain a...
mailcow 操作系统命令注入漏洞
mailcow is a mail server suite. An operating system command injection vulnerability exists in versions prior to mailcow 2022-06a that originates from the ability to execute arbitrary code by manipulating the custom parameters regexmess, skipmess, regexflag, delete2foldersonly, delete2foldersbutno...
CVE-2022-2344
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045...
PT-2022-20459 · Nextcloud +1 · Nextcloud Server +1
Name of the Vulnerable Software and Affected Versions: Nextcloud server versions prior to 22.2.8 Nextcloud server versions prior to 23.0.5 Nextcloud server versions prior to 24.0.1 Description: The Nextcloud server is an open source personal cloud server. Affected versions were found to be...
CVE-2022-2289
Use After Free in GitHub repository vim/vim prior to 9.0...
CVE-2022-2288
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0...
ALPINE-CVE-2022-2285
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0...
CVE-2022-25876
The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery SSRF which allows attackers to send arbitrary requests to the local network and read the response. This is due to flawed DNS rebinding protection...