CVE-2022-0944

Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1...

Linux kernel安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable to a denial-of-service vulnerability that stems from a memory leak in the ICMPv6 network protocol stack. An attacker could exploit the vulnerability by generating and sending...

CVE-2022-0903

A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body...

CVE-2022-0904

A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted Apple Pages document...

Tp-link TL-WR840N 操作系统命令注入漏洞

Tp-link TL-WR840N is a wireless router from Tp-link, China. TP-LINK TL-WR840NES V6.20 version 180709 is vulnerable due to a lack of filtering and escaping of command parameters in the component oalstartPing. No details of the vulnerability are available at this time...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from the inability of Mattermost 6.3.0 and earlier versions to protect the team creator's email address via one of the APIs, which can be...

PT-2022-1650 · Tp Link · Tp-Link Tl-Wa850Re

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WA850RE versions prior to v6 200923 Description: The issue is related to the use of highly predictable and easily detectable session keys in the TP-Link TL-WA850RE Wi-Fi Range Extender. This allows attackers to gain administrative...

AZL-50050 CVE-2022-25255 affecting package qt5-qtbase for versions less than 5.12.11-14

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH...

CVE-2022-23391

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

Appneta Tcpreplay 安全漏洞

Appneta Tcpreplay is a suite of open source utilities for editing and replaying network traffic on UNIX-based operating systems from AppNeta Appneta, USA. A security vulnerability exists in Appneta Tcpreplay 4.3.4, which stems from a Reachable Assertion in tree.c's addtreeipv6...

PT-2022-6172 · Unzip +6 · Unzip +6

Name of the Vulnerable Software and Affected Versions: Unzip versions 6.0 Description: A flaw was found in Unzip that occurs during the conversion of a wide string to a local string, leading to a heap out-of-bound write. This allows an attacker to input a specially crafted zip file, resulting in ...

GHSA-7X7C-QM48-PQ9C Cross-site Scripting in karma

karma prior to version 6.3.14 contains a cross-site scripting vulnerability...

PT-2022-15905 · Apache · Apache Traffic Control Traffic Ops

Name of the Vulnerable Software and Affected Versions: Apache Traffic Control Traffic Ops versions prior to 6.1.0 Apache Traffic Control Traffic Ops versions prior to 5.1.6 Description: The issue allows an unprivileged user who can reach Traffic Ops over HTTPS to send a specially-crafted POST...

CVE-2021-45741

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service DoS via the relay6to4 parameters...

CVE-2022-23889

The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments...

YetiForceCrm 跨站请求伪造漏洞

YetiForceCrm is an open source Crm system from the Polish company YetiForce. A cross-site request forgery vulnerability exists in YetiForceCrm prior to version 6.3.0, which stems from a lack of proper validation of client-side data by the WEB application. An attacker could exploit this...

CVE-2022-22174

A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 switches may cause the memory to not be freed, leading to a packet DMA memory leak, and eventual Denial of Service DoS condition. Once the condition occurs, further packet processin...

Tibco Ebx 跨站脚本漏洞

Tibco Ebx is a software from Tibco India that supports integration to manage enterprise data assets. A cross-site scripting vulnerability exists in TIBCO EBX, which can be exploited by an attacker to perform cross-site scripting attacks. Affected versions include TIBCO Software Inc.'s TIBCO EBX:...

CVE-2021-37865

Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service...

PT-2022-10681 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 6.1 and earlier Description: The issue arises from insufficient permission validation when viewing archived channels. This allows authenticated users to bypass system administrator restrictions and view the contents of...