2942 matches found
SUSE CVE-2022-1071
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
SUSE CVE-2022-24806
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an Improper Input Validation vulnerability when SETing malformed OIDs in master agent and subagent simultaneously. Version 5.9.2 contains a...
SUSE CVE-2022-24805
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. A user with read-only credentials can exploit the issue. Version 5.9.2 contains...
SUSE CVE-2022-26496
In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBDOPTINFO or NBDOPTGO message with an large value as the length of the name...
SUSE CVE-2023-0411
Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file...
LexisNexis Firco Compliance Link 跨站请求伪造漏洞
LexisNexis Firco Compliance Link is an application from LexisNexis, Inc. for automating the online compliance process. A security vulnerability exists in LexisNexis Firco Compliance Link version 3.7 that stems from the presence of SRF...
PT-2023-19252 · Sap · Sap Business Planning/Consolidation
Name of the Vulnerable Software and Affected Versions: SAP Business Planning and Consolidation versions 200, 300 Description: The issue allows an attacker with business authorization to upload any files, including web pages, without proper file format validation. If other users visit the uploaded...
SAP Business Planning and Consolidation 代码问题漏洞
SAP Business Planning and Consolidation is a business planning and consolidation software from SAP, Germany. The software provides budgeting, forecasting, and financial consolidation capabilities. A code issue vulnerability exists in SAP Business Planning and Consolidation version 200, version 30...
Microsoft .NET Framework 安全漏洞
Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A security vulnerability...
CVE-2022-46678
Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized...
Dell SupportAssist for Home PCs 信任管理问题漏洞
Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A security vulnerability exists in Dell SupportAssist for Home PCs version 3.11.4 and prior versions, which...
CVE-2022-45766
Hardcoded credentials in Global Facilities Management Software GFMS Version 3 software distributed by Key Systems Management permits remote attackers to impact availability, confidentiality, accessibility and dependability of electronic key boxes...
Key-Systems Global Facilities Management Software 信任管理问题漏洞
Key-Systems Global Facilities Management Software Key-Systems GFMS is a global facilities management software from Key-Systems. A security vulnerability exists in Key Systems Management Global Facilities Management Software GFMS version 3 that stems from the use of hard-coded credentials, resulti...
CVE-2022-48019
The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to perform privilege escalation via a crafted payload...
CVE-2022-29416
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Afterpay Gateway for WooCommerce = 3.5.0 versions...
Another Eden 安全漏洞
WFS Another Eden 另一个伊甸 is a 2017 free-to-play mobile RPG game by WFS Japan. A security vulnerability exists in Another Eden versions prior to v3.0.20 and prior to v2.14.200, which stems from the components wfshbr64.sys and wfshbr32.sys that allow an attacker to perform elevation of privilege via ...
TPCMS 跨站脚本漏洞
TPCMS is a source of happiness Source of Happiness individual developers of an open source content management system. A cross-site scripting vulnerability exists in TPCMS version 3.2. A remote attacker can exploit this vulnerability to run arbitrary code via the cfgcopyright or cfgtel fields in t...
HP Security Manager 安全漏洞
HP Security Manager is an industry-first policy-based solution from Hewlett-Packard HP. It helps improve security, enhance regulatory compliance and reduce risk across imaging and printing teams. A security vulnerability exists in HP Security Manager versions prior to 3.9, which stems from a...
taoCMS 代码问题漏洞
taoCMS is a Chinese micro CMS Content Management System. A security vulnerability exists in taoCMS version v3.0.2, which stems from an arbitrary file upload vulnerability that can be exploited by an attacker to execute arbitrary code via a crafted PHP file...
