CVE-2022-24603

Luocms v2.0 is affected by SQL Injection in /admin/news/sortmod.php...

CVE-2022-24602

Luocms v2.0 is affected by SQL Injection in /admin/news/newsmod.php...

CVE-2022-24603

Luocms v2.0 is affected by SQL Injection in /admin/news/sortmod.php...

CVE-2022-24602

Luocms v2.0 is affected by SQL Injection in /admin/news/newsmod.php...

CVE-2022-24600

Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements...

CVE-2022-24601

Luocms v2.0 is affected by SQL Injection in /admin/manager/adminmod.php. An attacker can obtain sensitive information through SQL injection statements...

CVE-2022-24601

Luocms v2.0 is affected by SQL Injection in /admin/manager/adminmod.php. An attacker can obtain sensitive information through SQL injection statements...

DEBIAN-CVE-2021-3981

A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in...

Luocms SQL注入漏洞

Luocms is an article management system. A SQL injection vulnerability exists in Luocms v2.0, which stems from a lack of validation of external input SQL statements in /admin/manager/adminmod.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database...

Luocms SQL注入漏洞

Luocms is an article management system. A SQL injection vulnerability exists in Luocms v2.0, which stems from a lack of validation of external input SQL statements in /admin/news/newsok.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data...

PT-2022-13302 · Apple · Swift-Nio-Http2

Name of the Vulnerable Software and Affected Versions: swift-nio-http2 versions 1.0.0 through 1.19.2 Description: A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logic...

CVE-2021-26401

LFENCE/JMP mitigation V2-2 may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs...

PT-2022-2678 · Pjsip +4 · Pjsip +4

Name of the Vulnerable Software and Affected Versions: PJSIP versions prior to and including 2.12 Description: The issue is a stack-buffer overflow vulnerability in the PJSIP library, which only impacts users who accept hashed digest credentials with data type PJSIP CRED DATA DIGEST. This...

CVE-2021-27756

"TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it."...

UBUNTU-CVE-2022-0577

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...

PT-2022-1780 · Gerbv +4 · Gerbv +4

Name of the Vulnerable Software and Affected Versions: Gerbv versions 2.7.0 and dev commit b5f1eacd Gerbv forked version commit d7f42a9a Description: An out-of-bounds read issue exists in the RS-274X aperture macro outline primitive functionality. This can be triggered by a specially-crafted Gerb...

PT-2022-16585 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.2.4 Description: The issue arises from some example DAGs in Apache Airflow not properly sanitizing user-provided params, making them susceptible to OS Command Injection from the web UI. Recommendations: For...

CVE-2022-25098

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

CVE-2022-25098

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...