319 matches found
PT-2022-24711
Name of the Vulnerable Software and Affected Versions Clerk WordPress plugin versions prior to 4.0.0 Description The issue affects the validation function for all API requests, making it vulnerable to time-based attacks due to the usage of comparison operators to verify API keys against the ones...
CVE-2022-44354
SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file...
Xiongmai Camera XM-JPR2-LX 安全漏洞
Xiongmai Camera XM-JPR2-LX is a video surveillance device from China Xiongmai Technology Xiongmai Company. A security vulnerability exists in the Xiongmai Camera XM-JPR2-LX version V4.02.R12.A6420987.10002.147502.00000, which originates from the vulnerability of the device to account theft...
PT-2022-11206 · Unknown · Xpdf-Reader
Name of the Vulnerable Software and Affected Versions: xpdfreader version 4.03 Description: The issue is related to a Buffer Overflow. Recommendations: For xpdfreader version 4.03, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2022-41391
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php...
Moodle 安全漏洞
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle, which poses a remote code execution risk when restoring an incorrectly formatted backup file...
UBUNTU-CVE-2020-27802
An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
UPX 安全漏洞
UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which originates from an attacker being able to cause invalid memory address references to the adjABS function of its plxelf.cpp component via a carefully crafted Mach-O file...
UPX 安全漏洞
UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which originates from an attacker being able to cause invalid memory address references to the elflookup function of its plxelf.cpp component via a carefully crafted Mach-O file...
CVE-2022-29704
BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability...
CVE-2022-29704
BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability...
BrowsBox CMS SQL注入漏洞
BrowsBox CMS is a content management system from BrowsBox Belgium. v4.0 of BrowsBox CMS is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
CVE-2021-39023
IBM Guardium Data Encryption GDE 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 213860...
CVE-2021-39027
IBM Guardium Data Encryption GDE 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865...
PT-2022-4846 · D Link · D-Link Dir-2150
Name of the Vulnerable Software and Affected Versions: D-Link DIR-2150 version 4.0.1 Description: This issue allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 routers. Authentication is not required to exploit this issue. The specific fla...
CVE-2022-25012
Argus Surveillance DVR v4.0 employs weak password encryption...
CVE-2022-25012
Argus Surveillance DVR v4.0 employs weak password encryption...
PT-2022-16827 · Unknown · Fluture-Node
Name of the Vulnerable Software and Affected Versions: Fluture-Node versions 4.0.0 through 4.0.1 Description: Using followRedirects or followRedirectsWith with any of the redirection strategies built into Fluture-Node, paired with a request that includes confidential headers such as Authorization...