UBUNTU-CVE-2022-2286

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0...

AZL-10015 CVE-2022-2285 affecting package vim for versions less than 9.0.0050-2

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0...

UBUNTU-CVE-2022-2285

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0...

ALPINE-CVE-2022-2284

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...

CVE-2022-2284

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...

CVE-2022-32155

In universal forwarder versions before 9.0, management services are available remotely by default. When not required, it introduces a potential exposure, but it is not a vulnerability. If exposed, we recommend each customer assess the potential severity specific to your environment. In 9.0, the...

CVE-2021-40910

There is a reflective cross-site scripting XSS vulnerability in the PHPCMS V9.6.3 management side...

PT-2022-21218 · Unknown · Youdiancms

Name of the Vulnerable Software and Affected Versions: YoudianCMS version 9.5.0 Description: A SQL injection issue was discovered via the IdList parameter at the "/App/Lib/Action/Home/ApiAction.class.php" endpoint. This allows for potential exploitation. No information is provided about the...

PEEL Shopping CMS SQL注入漏洞

PEEL Shopping CMS is a shopping platform. A SQL injection vulnerability exists in PEEL Shopping CMS version 9.4.0, which stems from a lack of filtering of SQL data in utilisateurs.php. An attacker belonging to the Administrators group can inject malicious SQL queries to affect the application's...

TYPO3 跨站脚本漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. TYPO3 suffers from a cross-site scripting vulnerability that originates in the Form Designer back-end module of Form Framework, which is susceptible to cross-site scripting attacks and...

CVE-2022-2067

SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0...

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape version 9.90 SP5, which stems from a faulty boundary condition. A remote attacker could create a specially...

WordPress plugin Image Hover Effects Ultimate跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Image Hover Effects Ultimate plugin 9.7.1 and earlier versions are vulnerable to a cross-site...

CVE-2022-0574

Improper Access Control in GitHub repository publify/publify prior to 9.2.8...

PT-2022-13270 · Publify · Publify

Name of the Vulnerable Software and Affected Versions: publify/publify versions prior to 9.2.8 Description: The issue concerns improper access control in the GitHub repository publify/publify. It allows anonymous users to leave comments on articles in draft mode, even though they cannot view thes...

Photosynthetic Technology waimairenCMS 安全漏洞

Photosynthetic Technology waimairenCMS is a takeaway content management system from Photosynthetic Technology China. A security vulnerability exists in waimairenCMS version 9.1, which can be exploited by attackers to conduct Remote Code Execution RCE...

CVE-2022-29167 ReDoS vulnerability in header parsing in hawk

Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, request URI, host, and optionally the request payload. Hawk used a regular expression to parse Host HTTP...

CVE-2022-25786

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: GateManager all versions prior to 9.7...

Secomea 多款产品加密问题漏洞

Secomea GateManager and Secomea SiteManager are both products of Secomea, Denmark.GateManager is a remote access server product.Secomea SiteManager is a software application. Secomea SiteManager is a software application that provides a remote maintenance function for industrial equipment. A...

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerability exists in versions prior to Secomea GateManager 9.7, which stems from improper handling of permissions in Secomea GateManager's Web UI, and could be exploited to allow logged-in users to...