PT-2025-40555

Name of the Vulnerable Software and Affected Versions Redis versions prior to 8.2.2 Valkey versions prior to 8.1.1+dfsg1-3+deb13u1 Redis versions 5:7.0.15-1deb12u6 and prior bookworm distribution Redis versions 5:8.0.2-3+deb13u1 and prior trixie distribution Description Redis and Valkey are...

PHP 安全漏洞

PHP is a scripting language that executes on the server side. A security vulnerability exists in PHP where a password stored using the passwordhash function begins with a null byte x00, and testing a blank string as the password via the passwordverify function will incorrectly return true. the...

UBUNTU-CVE-2024-20969

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

WordPress Plugin Slider Hero 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

Hewlett Packard Enterprise OneView 安全漏洞

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. A security vulnerability exists in Hewlett Packard Enterprise OneView versions prior to 8.2 that stems from a device dump that could expose OneView use...

SUSE CVE-2022-1968

Use After Free in GitHub repository vim/vim prior to 8.2...

SUSE CVE-2022-2125

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

SUSE CVE-2022-2207

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

SUSE CVE-2022-2231

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2...

PT-2022-26971 · Splunk · Splunk Enterprise

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 8.1.12 Splunk Enterprise versions prior to 8.2.9 Splunk Enterprise versions prior to 9.0.2 Description: The issue allows for a Reflected Cross Site Scripting via JavaScript Object Notation JSON in a query...

Splunk 代码注入漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

PT-2022-21090 · WordPress · Soledad

Name of the Vulnerable Software and Affected Versions: Soledad WordPress theme versions prior to 8.2.5 Description: The issue arises from the lack of sanitization of certain parameters, including id and datafiltertype, in the penci more slist post ajax AJAX action. This leads to a Reflected...

CVE-2022-2207

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-2182

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

UBUNTU-CVE-2022-2175

Buffer Over-read in GitHub repository vim/vim prior to 8.2...

DEBIAN-CVE-2022-2125

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

DEBIAN-CVE-2022-1898

Use After Free in GitHub repository vim/vim prior to 8.2...

CVE-2022-1769

Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974...

IBM Spectrum Virtualize 信任管理问题漏洞

IBM Spectrum Virtualize is a block storage virtualization system from IBM USA. It improves data value, security, and simplicity for new and existing storage infrastructures.An access control error vulnerability exists in IBM Spectrum Virtualize versions 8.2, 8.3, and 8.4. The vulnerability stems...

CVE-2022-22550

Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability. An unprivileged local attacker could potentially exploit this vulnerability, leading to account take over...