PT-2022-24378 · Safe · Fme Server

Name of the Vulnerable Software and Affected Versions: Safe Software FME Server versions prior to v2022.0.1.1 Description: The issue is related to a Path Traversal vulnerability via the fmedataupload component. This vulnerability allows unauthorized access to sensitive files and directories...

Apache InLong 代码问题漏洞

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. A deserialization vulnerability exists in Apache InLong versions prior to 1.3.0, which arises from unsafe deserialization of...

CVE-2022-38339

Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting XSS vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the login page...

PT-2022-34072 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to a fix for an address sanitizer warning in raid status. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-34087 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to a refcount leak in the xive get max prio function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-16040 · WordPress · Post Smtp Mailer/Email Log

Name of the Vulnerable Software and Affected Versions: Post SMTP Mailer/Email Log WordPress plugin versions prior to 2.1.4 Description: The issue allows high privilege users to perform Cross-Site Scripting attacks against other users, even when the unfiltered html capability is disallowed, due to...

Nextcloud 信息泄露漏洞

Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An information disclosure vulnerability exists in Nextcloud server versions prior to 23.0.7, 24.0.3 and prior to 24.0.3, which stems from the inability to...

DEBIAN-CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

Cargo 路径遍历漏洞

Cargo is a Rust package manager open-sourced by The Rust Programming Language. A path traversal vulnerability exists in versions of Cargo prior to 0.65.0, which stems from extracting a malicious crate that could corrupt arbitrary files...

GLPI 跨站脚本漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

GLPI 代码问题漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

PT-2022-4788 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver versions prior to 10.0.10240.19444 Windows Common Log File System Driver versions prior to 10.0.14393.5356 Windows Common Log File System Driver versions prior to the fixed version Description: The issue ...

Apple macOS Safari 安全漏洞

Apple Safari and others are products of Apple Inc.Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems.Apple macOS Big Sur is the 17th major version of Apple's macOS for the MAC operating system.Apple macOS Monterey is the 18th major...

PT-2022-17642 · Unknown · Com.Diffplug.Gradle:Goomph

Name of the Vulnerable Software and Affected Versions: com.diffplug.gradle:goomph versions prior to 3.37.2 Description: This issue allows a malicious zip file to potentially break out of the expected destination directory, writing contents into arbitrary locations on the file system. Overwriting...

AZL-34910 CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...

Appwrite 跨站脚本漏洞

Appwrite is Appwrite open source an end-to-end backend server . Used to package into a set of Docker microservices for web, mobile, native or backend applications . A cross-site scripting vulnerability exists in versions prior to Appwrite 1.0.0-RC1. No information about this vulnerability is...

Jib 安全漏洞

Jib is a GoogleContainerTools open source library. It is used to build container images for your Java applications. A security vulnerability exists in versions of Jib prior to 0.22.0 that stems from the ease with which an attacker can execute input via the isDockerInstalled function resulting in...

XWiki Platform 授权问题漏洞

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from XWiki France. An authorization issue vulnerability exists in XWiki Platform versions prior to 13.10.4, 14.2, and 14.2, which arises from a login operation that bypasses authentication...

PT-2022-23540 · Unknown · Pcprotect Endpoint

Name of the Vulnerable Software and Affected Versions: PCProtect Endpoint versions prior to 5.17.470 Description: The issue allows authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable due to a...

PT-2022-23139 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: Rizin versions 0.4.0 and prior Description: Rizin is a UNIX-like reverse engineering framework and command-line toolset. The issue arises from an out-of-bounds write when getting data from Luac files. A user opening a malicious Luac file coul...