4750 matches found
Digital COVID Certificates 信任管理问题漏洞
Digital COVID Certificates is a digital COVID certificate for the European Union, designed to help facilitate the free movement and travel of EU citizens and non-EU nationals within the EU. A security vulnerability exists in Digital COVID Certificates that stems from the product allowing the use ...
PT-2022-15054 · Unknown · Wasmcloud Host Runtime
Name of the Vulnerable Software and Affected Versions: wasmCloud Host Runtime versions prior to 0.52.2 Description: The issue affects the security model of actors in the wasmCloud Host Runtime, allowing them to bypass capability authorization. Normally, actors are required to declare their...
PT-2022-10300 · Libspf2 +3 · Libspf2 +3
Name of the Vulnerable Software and Affected Versions: libspf2 versions prior to 1.2.11 Description: The issue is a heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail message from anywhere on the Internet with a crafted SPF DNS...
CVE-2022-0260
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.2.7...
CVE-2021-25005
The SEUR Oficial WordPress plugin before 1.7.0 does not sanitize and escape some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
WordPress plugin 跨站脚本漏洞
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Landing Page Builder plugin prior to version...
DEBIAN-CVE-2022-22822
addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
AZL-7159 CVE-2022-22825 affecting package expat for versions less than 2.4.3-1
lookup in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
CVE-2021-46166
Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page...
WordPress插件跨站脚本漏洞
WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress 10Web Social Photo Feed Plugin has a cross-site scripting vulnerability in versions prior to 1.4.29, which stems...
ALPINE-CVE-2021-46143
In doProlog in xmlparse.c in Expat aka libexpat before 2.4.3, an integer overflow exists for mgroupSize...
WordPress 安全漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. WordPress Tab plugin version before 1.3.2 has...
PT-2022-9465
Name of the Vulnerable Software and Affected Versions Download Monitor WordPress plugin versions prior to 4.4.5 Description The issue arises from the improper validation and escaping of the orderby GET parameter in SQL statements when viewing logs, leading to an SQL Injection issue. Recommendatio...
Avast Antivirus Self-Defense driver 权限许可和访问控制问题漏洞
Avast Antivirus is a suite of antivirus software from the Czech company Avast, and an elevation of privilege vulnerability exists in the Self-Defense driver for versions prior to Avast Antivirus 20.8. An attacker could exploit this vulnerability by "hollowing out" the process wscproxy.exe to gain...
Rust ckb crate资源管理错误漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. versions prior to Rust ckb crate 0.40.0 have a security vulnerability that can be exploited by attackers to cause a denial of service...
CVE-2021-45646
NETGEAR R7000 devices before 1.0.11.116 are affected by disclosure of sensitive information...
CVE-2021-45576
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6...
Rust lru crate 资源管理错误漏洞
Mozilla Rust lru crate is an implementation of the LRU cache. a security vulnerability exists in versions of Mozilla Rust lru crate prior to 0.7.1, which can lead to a resource management error. An attacker could exploit this vulnerability to cause memory corruption...
CVE-2021-39306
A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a big size Authentication challenge text in WEP security...