PT-2022-21445 · Puppet +1 · Puppetlabs-Mysql +1

Name of the Vulnerable Software and Affected Versions: puppetlabs-mysql versions prior to 13.0.0 Description: Command injection is possible in the puppetlabs-mysql module. A malicious actor can exploit this issue if they are able to provide unsanitized input to the module. This condition is rare ...

CVE-2022-2637

Incorrect Privilege Assignment vulnerability in Hitachi Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation.This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.0...

PT-2022-26060 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.8 MediaWiki versions 1.36.x through 1.37.4 MediaWiki versions 1.38.x through 1.38.2 Description: An issue was discovered in MediaWiki. When changes made by an IP address are reassigned to a user using...

Snyk CLI 操作系统命令注入漏洞

Snyk CLI is a build-time tool from Snyk USA for finding and fixing known vulnerabilities in projects. An operating system command injection vulnerability exists in versions of Snyk CLI prior to 1.996.0, which stems from allowing the execution of arbitrary commands and affects the Snyk IDE plugin...

css-what 资源管理错误漏洞

css-what is a CSS selector parser. A resource management error vulnerability exists in versions of css-what prior to 2.1.3, which stems from the use of an unsafe regular expression in the reattr variable of index.js...

HTMLy 路径遍历漏洞

HTMLy is a PHP-based open source blogging platform. A path traversal vulnerability exists in HTMLy versions prior to 2.8.1. A remote attacker can exploit this vulnerability to delete arbitrary files with the help of modified file parameters...

AZL-11062 CVE-2022-3352 affecting package vim for versions less than 9.0.0614-1

Use After Free in GitHub repository vim/vim prior to 9.0.0614...

Flatpress 代码问题漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. A code issue vulnerability exists in Flatpress versions prior to v1.2.1, which stems from a Remote Code Execution RCE vulnerability contained in the upload file feature...

CVE-2022-31628 phar wrapper can occur dos when using quine gzip file

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

Vim 代码问题漏洞

Vim is a cross-platform text editor. a code issue vulnerability exists in versions prior to Vim 8.2.4959, which stems from NULL pointer dereferencing. No detailed vulnerability details are currently available...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome versions prior to 106, which stems from an incorrect security UI for full-screen display...

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 106.0.5249.62, which stems from a mix-up in instructions responsible for freeing memory in Media. An attacker could exploit the vulnerability potential...

CVE-2021-28052

A tenant administrator Hitachi Content Platform HCP may modify the configuration in another tenant without authorization, potentially allowing unauthorized access to data in the other tenant. Also, a tenant user non-administrator may view configuration in another tenant without authorization. Thi...

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

WordPress plugin WP Popup Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

MyGraph 跨站脚本漏洞

MyGraph is renlm individual developers an integrated permissions management system, unified user authentication center, real-time dynamic gateway agent and online document management and many other powerful features in one of the backend system development template. A security vulnerability exist...

UBUNTU-CVE-2022-3278

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552...

Parse Server 授权问题漏洞

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. An authorization issue vulnerability exists in Parse Server versions prior to 4.10.16, 5.0.0 through 5.2.7, which stems from an inability to validate the application IDs of Facebook and Spotify...

CVE-2022-2177

Kayrasoft product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox versions prior to 105, which stems from a memory security flaw that, if exploited, could execute arbitrary code...