CVE-2022-0260

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.2.7...

CVE-2021-25005

The SEUR Oficial WordPress plugin before 1.7.0 does not sanitize and escape some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Landing Page Builder plugin prior to version...

AZL-7159 CVE-2022-22825 affecting package expat for versions less than 2.4.3-1

lookup in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...

DEBIAN-CVE-2022-22822

addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...

CVE-2021-46166

Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page...

WordPress插件跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress 10Web Social Photo Feed Plugin has a cross-site scripting vulnerability in versions prior to 1.4.29, which stems...

ALPINE-CVE-2021-46143

In doProlog in xmlparse.c in Expat aka libexpat before 2.4.3, an integer overflow exists for mgroupSize...

PT-2022-9465

Name of the Vulnerable Software and Affected Versions Download Monitor WordPress plugin versions prior to 4.4.5 Description The issue arises from the improper validation and escaping of the orderby GET parameter in SQL statements when viewing logs, leading to an SQL Injection issue. Recommendatio...

WordPress 安全漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. WordPress Tab plugin version before 1.3.2 has...

Rust ckb crate资源管理错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. versions prior to Rust ckb crate 0.40.0 have a security vulnerability that can be exploited by attackers to cause a denial of service...

Avast Antivirus Self-Defense driver 权限许可和访问控制问题漏洞

Avast Antivirus is a suite of antivirus software from the Czech company Avast, and an elevation of privilege vulnerability exists in the Self-Defense driver for versions prior to Avast Antivirus 20.8. An attacker could exploit this vulnerability by "hollowing out" the process wscproxy.exe to gain...

CVE-2021-45646

NETGEAR R7000 devices before 1.0.11.116 are affected by disclosure of sensitive information...

CVE-2021-45576

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6...

Rust lru crate 资源管理错误漏洞

Mozilla Rust lru crate is an implementation of the LRU cache. a security vulnerability exists in versions of Mozilla Rust lru crate prior to 0.7.1, which can lead to a resource management error. An attacker could exploit this vulnerability to cause memory corruption...

CVE-2021-45459

lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter...

CVE-2021-44028

XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285...

CVE-2021-44028

XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285...

DEBIAN-CVE-2021-4011

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SwapCreateRegister function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Apache NiFi 信息泄露漏洞

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. A code issue vulnerability exists in Apache NiFi's TransformXML, which stems from a vulnerability in Apache NiFi's...