CVE-2022-45071

Cross-Site Request Forgery CSRF vulnerability in WPML Multilingual CMS premium plugin = 4.5.13 on WordPress...

PT-2022-26771 · Unknown · Kkfileview

Name of the Vulnerable Software and Affected Versions: kkFileView version 4.1.0 Description: The issue allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the url parameter. This is achieved through a Server-Side Request Forgery SSRF in the...

libtiff: heap buffer overflow in extractImageSection

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

GHSA-WJFM-QXG2-Q679 Liferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module

Certain Liferay products are vulnerable to Cross Site Scripting XSS via the Commerce module. This affects the Commerce module before 4.0.8 from Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8...

kernel: NFSv4: Fix free of uninitialized nfs4_label on referral lookup.

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix free of uninitialized nfs4label on referral lookup. Send along the already-allocated fattr along with nfs4fslocations, and drop the memcpy of fattr. We end up growing two more allocations, but this fixes up a crash as:...

s::can moni::tools SQL注入漏洞

s::can moni::tools is a platform from s::can for managing a virtually unlimited number of sites, online probes, analyzers and parameters. A SQL injection vulnerability exists in versions of s::can moni::tools prior to 4.2, which originates from an authenticated attacker being able to gain full...

PT-2022-35243 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue concerns the recognition of a trial period in the Linux Kernel. It was introduced in version v4.18 and fixed in version v5.15.76. The actual impact and attack plausibility have no...

PT-2022-35801 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It was introduced in version v2.6.21 and fixed in version v4.19.262. The actual impact and attack plausibility ha...

PT-2022-35088 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the drm/msm/dpu component, specifically with the indexing of dpu kms-hw vbif using vbif idx. This is a potential security vulnerability, although its actual impact and...

PT-2022-35800 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A leak of nilfs root occurs in case of writer thread creation failure. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-35803 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: openvswitch versions prior to v4.14.298 Linux Kernel versions prior to v4.14.298 Description: The issue is related to a switch from WARN to pr warn in openvswitch. The actual impact and attack plausibility have not yet been proven...

PT-2022-35888 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.332 Description: The issue is related to the hugetlb lock not being taken before decrementing h-resv huge pages. This could potentially lead to security vulnerabilities, although the actual impact and attac...

Xiongmai Camera XM-JPR2-LX 安全漏洞

Xiongmai Camera XM-JPR2-LX is a video surveillance device from China Xiongmai Technology Xiongmai Company. A security vulnerability exists in the Xiongmai Camera XM-JPR2-LX version V4.02.R12.A6420987.10002.147502.00000, which originates from the vulnerability of the device to account theft...

IOBit IOTransfer 代码问题漏洞

IOBit IOTransfer is an easy-to-use iOS file transfer tool, phone cleaner, and video downloader from IOBit. Easily transfer/synchronize/move/backup photos, music, videos, contacts and more. A security vulnerability exists in version V4 of IOBit IOTransfer, which stems from its unquoted service pat...

PT-2022-28244 · Unknown · Company Account Feature

Name of the Vulnerable Software and Affected Versions: Company account feature version 4 and later Description: A critical issue allows users with the Company admin role to assign any role to any user, bypassing subtree limitations. This also affects users with the role / assign policy, typically...

PT-2022-11206 · Unknown · Xpdf-Reader

Name of the Vulnerable Software and Affected Versions: xpdfreader version 4.03 Description: The issue is related to a Buffer Overflow. Recommendations: For xpdfreader version 4.03, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2022-28268 · Unknown · Company Account Feature

Name of the Vulnerable Software and Affected Versions: Company account feature version 4 and later Description: A critical issue allows users with the Company admin role to assign any role to any user, bypassing subtree limitations. This also affects users with the role / assign policy, typically...

CVE-2022-43120

A cross-site scripting XSS vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field default value text field...

kernel: NFSv4: Fix free of uninitialized nfs4_label on referral lookup.

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix free of uninitialized nfs4label on referral lookup. Send along the already-allocated fattr along with nfs4fslocations, and drop the memcpy of fattr. We end up growing two more allocations, but this fixes up a crash as:...

Symantec Endpoint Detection And Response 安全漏洞

Broadcom Symantec Endpoint Detection And Response is an endpoint security detection and response solution from Broadcom. A security vulnerability exists in the Symantec Endpoint Detection And Response SEDR Appliance prior to version 4.7.0, which stems from susceptibility to elevation of privilege...