8821 matches found
CVE-2022-25582
A stored cross-site scripting XSS vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field...
CVE-2022-23881
ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution RCE vulnerability via dangerkey at zzztemplate.php...
CVE-2021-41736
Faust v2.35.0 was discovered to contain a heap-buffer overflow in the function realPropagate at propagate.cpp...
CVE-2022-1034
There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4...
PJSIP 安全漏洞
PJSIP is a free and open source multimedia communication library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. A security vulnerability exists in PJSIP 2.12 and earlier versions that stems from a stack-based buffer overflow vulnerability in...
CVE-2022-25462
Yafu v2.0 contains a segmentation fault via the component /factor/avx-ecm/vecarith52.c. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...
HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier
...
CVE-2022-26300
EOS v2.1.0 was discovered to contain a heap-buffer-overflow via the function txntestgenplugin...
PT-2022-15156
Name of the Vulnerable Software and Affected Versions NVIDIA FLARE versions prior to 2.0.16 Description The issue is related to the admin interface of NVIDIA FLARE, where an unauthorized attacker can cause allocation of resources without limits or throttling, potentially leading to system...
CVE-2022-25488
Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php...
CVE-2022-25488
Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php...
Tiny File Manager路径遍历漏洞
Tiny File Manager is a web-based open source file manager. A path traversal vulnerability in the tinyfilemanager.php file upload function in Tiny File Manager 2.4.1 allows remote attackers to upload malicious PHP files to the webroot using a valid user account and achieve code execution on the...
PT-2022-18283 · Jenkins · Jenkins Dashboard View Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Dashboard View Plugin versions 2.18 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the Jenkins Dashboard View Plugin does not perform URL validation for the Iframe...
CVE-2022-23943
Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions...
Apache HTTP Server 环境问题漏洞
Apache HTTP Server is an open source web server from the Apache Foundation. Apache HTTP Server is vulnerable to an environmental issue that results from Apache HTTP Server's inability to close inbound connections when dropping the body of a request, leading to request smuggling. The vulnerability...
Timescale TimescaleDB 安全漏洞
Timescale TimescaleDB is an open source database software from Timescale, Inc. It is designed to make SQL extensible for time series data. A security vulnerability exists in TimescaleDB 1.x and 2.x prior to Timescale TimescaleDB 2.5.2. The vulnerability could allow elevation of privilege during...
CVE-2022-26967
GPAC 2.0 allows a heap-based buffer overflow in gfbase64encode. It can be triggered via MP4Box...
PT-2022-18146 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: GPAC version 2.0 Description: The issue is a heap-based buffer overflow in the gf base64 encode function. It can be triggered via MP4Box. Recommendations: For GPAC version 2.0, at the moment, there is no information about a newer version that...
The vulnerability of the json-smart-v1 and json-smart-v2 libraries, which stems from insufficient checking of unusual or exceptional states, allows attackers to trigger an emergency shutdown of the application or disclose protected information.
The vulnerability of the json-smart-v1 and json-smart-v2 libraries is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an application to terminate abnormally or expose protected information...