Apple Xcode 注入漏洞

Apple Xcode is a set of integrated development environments IDEs provided to developers by Apple, Inc. that are primarily used to develop applications for Mac OS X and iOS. A security vulnerability exists in Apple Xcode versions prior to 14.1, which stems from an injection issue where an...

PT-2022-21551 · Apple · Ios

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16 Description: The issue allows an app to potentially execute arbitrary code with kernel privileges due to a problem that was addressed with improved memory handling. Recommendations: For iOS versions prior to 16, updat...

WordPress theme Newspaper 跨站脚本漏洞

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on servers running PHP and MySQL.WordPress theme is a theme for WordPress. A cross-site scripting vulnerability exists in versions of WordPress theme Newspaper prior to 12, whi...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ versions prior to 3.1.8. An attacker exploited the vulnerability to perform cross-site scripting attacks...

WordPress theme Newspaper 跨站脚本漏洞

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on servers running PHP and MySQL.WordPress theme is a theme for WordPress. A cross-site scripting vulnerability exists in versions of WordPress theme Newspaper prior to 12, whi...

AZL-38722 CVE-2022-42916 affecting package tensorflow for versions less than 2.16.1-1

In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly instead of using an insecure cleartext HTTP step even when HTTP is provided in the URL. This mechanism could be bypassed if the host nam...

Nextcloud 安全漏洞

Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud Germany. A security vulnerability exists in Nextcloud Server, Nextccloud Enterprise Server versions prior to 24.0.5. An attacker could exploit the vulnerability to...

YORDAM University Library Automation System 信息泄露漏洞

YORDAM University Library Automation System is a university library automation system from YORDAM. A security vulnerability exists in versions of the YORDAM University Library Automation System prior to 19.02, which arises from unauthorized disclosure of information...

Metabase 代码问题漏洞

Metabase is an open source data analytics platform from the US-based Metabase Inc. A security vulnerability exists in Metabase versions prior to 44.5, which stems from the /api/geojson endpoint's url parameter can be used to perform a server-side request forgery attack that utilizes 301 and 302...

Delta Electronics DIAEnergie 跨站脚本漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. A...

Apache XML Graphics Batik 代码问题漏洞

Apache XML Graphics Batik is a suite of Java-based applications from the Apache Foundation that are primarily used to process images in SVG format. A security vulnerability exists in versions of Apache XML Graphics prior to 1.16 that stems from a problem with Batik that allows an attacker to run...

OpenFGA 安全漏洞

OpenFGA is OpenFGA's high performance and flexible authorization/licensing engine built for developers and inspired by Google Zanzibar. A security vulnerability exists in versions of OpenFGA prior to 0.2.4, which stems from the ease of bypassing authorization under certain circumstances...

Apple Safari Security Update (HT213495)

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

Gin-Vue-Admin 路径遍历漏洞

Gin-Vue-Admin is a full-stack pre-development infrastructure platform based on Vue and Gin development. A security vulnerability exists in Gin-Vue-Admin versions prior to 2.5.4, which stems from the presence of a path traversal vulnerability that leads to a file upload vulnerability...

PT-2022-26603 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue allows an app to potentially access user-sensitive data due to inadequate data protection mechanisms. This has been addressed with improved data protection. Recommendations: For versions prior...

PT-2022-5355 · Unknown +10 · Multipath-Tools +10

Name of the Vulnerable Software and Affected Versions: multipath-tools versions 0.7.0 through 0.9.x before 0.9.2 multipath-tools versions prior to 0.9.2 Description: The issue is related to errors in privilege management, allowing an attacker to elevate their privileges to root. Local users who c...

PT-2022-21556 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A race condition was addressed with improved state handling, which could allow an app to modify protected parts of the file system. Recommendations: For versions prior to 13, update to macOS Ventura 13 ...

PT-2022-21576 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A type confusion issue was addressed with improved checks, which may allow an app to execute arbitrary code with kernel privileges. Recommendations: For versions prior to 13, update to macOS Ventura 13 ...

Automox 安全漏洞

Automox is a cloud-based tool from US-based Automox Inc. It can fully automate the patch repair process in Windows, macOS, Linux and third-party software including Adobe, Firefox, Chrome and Windows. A security vulnerability exists in versions prior to Automox Agent 40, which stems from permissio...

Design/Logic Flaw

A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band OOB Management. This allows remote attackers to obtain sensitive information via unspecified vectors. The following models with Synology DiskStation Manager DSM versions before 7.1.1-42962...