8472 matches found
CVE-2022-28036
AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMSadminajaxnavigation.php...
PT-2022-2609
Name of the Vulnerable Software and Affected Versions Ruby versions 2.6.0 through 2.6.9 Ruby versions 2.7.x through 2.7.5 Ruby versions 3.0.0 through 3.0.3 Ruby versions 3.1.0 through 3.1.1 Description The issue is related to a buffer over-read in Ruby, specifically in String-to-Float conversion,...
CVE-2022-0936
Cross-site Scripting XSS - Stored in GitHub repository autolab/autolab prior to 2.8.0...
WordPress plugin Post Grid 跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the...
exploitdb
This is an offensive tool for Exploits. It is a repository of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. The repository contains a collection of exploits for various operating systems and software, including AIX,...
DEBIAN-CVE-2022-24793
PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.12 and prior affects applications that use PJSIP DNS resolution. It doesn't affect PJSIP users who utilize an external resolver. This vulnerability is related to...
UBUNTU-CVE-2022-24793
PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.12 and prior affects applications that use PJSIP DNS resolution. It doesn't affect PJSIP users who utilize an external resolver. This vulnerability is related to...
UBUNTU-CVE-2022-1222
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...
Rancher Labs Rancher 安全漏洞
Rancher Labs Rancher is an open source enterprise container management platform from Rancher Labs, U.S.A. An access control error vulnerability exists in versions of Rancher Labs Rancher prior to 2.5.10, which could be exploited by remote attackers to impersonate an arbitrary user...
bVPN 代码问题漏洞
bVPN is a VPN software from the Dutch company bVPN. A security vulnerability exists in bVPN 2.5.1 via a carefully crafted file in the waselvpnserv service path...
Barco Control Room 路径遍历漏洞
Barco Control Room is a visualization and collaboration solution from Barco Belgium. It is used to build control rooms. A path traversal vulnerability exists in Barco Control Room Management Suite version 2.9 Build 0275 and prior versions. The vulnerability allows an attacker to access sensitive...
CVE-2021-32970
Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote attacker to cause denial-of-service conditions...
OPENSUSE-SU-2022:0097-1 Security update for icingaweb2
This update for icingaweb2 fixes the following issues: icingaweb2 was updated to 2.8.6 This is a security release. Security Fixes - CVE-2022-24715: SSH resources allow arbitrary code execution for authenticated users GHSA-v9mv-h52f-7g63 boo1196911 - CVE-2022-24714: Unwanted disclosure of hosts an...
Wyze Labs Wyze Cam 缓冲区错误漏洞
Wyze Labs Wyze Cam is a series of cameras from the US company Wyze Labs. Wyze Labs Wyze Cam has a security vulnerability that stems from a buffer overflow vulnerability in the presence of a stack. An attacker could exploit the vulnerability to run arbitrary code on the affected device. The...
CVE-2022-0846
The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dkspeakoutsendmail AJAX action, leading to an SQL Injection exploitable by unauthenticated users...
CVE-2021-43721
Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...
WordPress plugin Translate WordPress with GTranslate 跨站请求伪造漏洞
WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Translate WordPress with GTranslate plugin version 2.9.9 is vulnerable to cross-site request forgery. The vulnerability...
CVE-2022-25582
A stored cross-site scripting XSS vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field...