fava 跨站脚本漏洞

fava is the web interface of Beancount, an open source double-entry bookkeeping software from Beancount. A cross-site scripting vulnerability exists in versions prior to fava v1.22, which stems from the time and filter parameters being vulnerable to reflective cross-site scripting...

Apache MXNet 安全漏洞

Apache MXNet is an open source deep learning software framework from the Apache Apache Foundation in the United States. It is used for training and deploying deep neural networks. A security vulnerability exists in Apache MXNet incubating versions prior to 1.9.1, which stems from the use of regul...

Couchbase Server 日志信息泄露漏洞

Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server versions prior to 7.0.4, which stems from a private key that can b...

JetBrains TeamCity 参数注入漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A security vulnerability exists in JetBrains TeamCity...

PT-2022-3770 · Oracle +8 · Oracle Mysql Server +8

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.29 and prior Description: The issue is related to errors in resource release in the Server: Optimizer component of the Oracle MySQL Server. It can be exploited by a remote attacker to cause a denial of service...

Kentico 安全漏洞

Kentico is an ASP.NET-based content management system CMS from Kentico, Inc. A security vulnerability exists in Kentico versions prior to 13.0.66, which can be exploited by an attacker to cause a denial of service via a specially crafted request to the GetResource handler...

PT-2022-17987 · Pexip · Pexip Infinity

Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions prior to 27.3 Description: The issue allows remote attackers to force a software abort via HTTP. Recommendations: For versions prior to 27.3, update to version 27.3 or later to resolve the issue...

Pexip Infinity 输入验证错误漏洞

Pexip Infinity is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity versions prior to 27.3 contain an input validation error vulnerability that can be exploited by remote, unauthenticated attackers to cause a denial of service...

WordPress plugin 404s 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

LTI 1.3 Tool Library 安全特征问题漏洞

The LTI 1.3 Tool Library is a library of LTI 1.3 tool providers for building IMS certifications in PHP. A security feature issue vulnerability exists in versions of the LTI 1.3 Tool Library prior to 5.0, which stems from the LTI 1.3 Tool Library is a library used to build LTI 1.3 tool providers f...

CVE-2022-35628

A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3...

CVE-2022-31654

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations...

CVE-2022-33736

A vulnerability has been identified in Opcenter Quality V13.1 All versions V13.1.20220624, Opcenter Quality V13.2 All versions V13.2.20220624. The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing...

CVE-2022-33736

A vulnerability has been identified in Opcenter Quality V13.1 All versions V13.1.20220624, Opcenter Quality V13.2 All versions V13.2.20220624. The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing...

SAMSUNG Galaxy Store 输入验证错误漏洞

Samsung Galaxy Store is an application store for Samsung Samsung mobile devices.An input validation error vulnerability exists in versions prior to Samsung Galaxy Store 4.5.41.8, which stems from faulty input validation logic and can be exploited by local attackers to launch campaigns with Galaxy...

WordPress plugin Bold Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2022-14090 · WordPress · Pagebar

Name of the Vulnerable Software and Affected Versions: Pagebar WordPress plugin versions prior to 2.70 Description: The issue concerns the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Additionally, due to the lac...

OnyxForum 路径遍历漏洞

OnyxForum is an open source forum repository for Space Station 13: Chaotic Onyx. A path traversal vulnerability exists in versions of OnyxForum prior to 2022-05-04, which stems from insecure use of the Flask sendfile function...

outline 跨站脚本漏洞

outline is an American outline open source used to provide the fastest wiki and knowledge base for growing teams . A cross-site scripting vulnerability exists in versions prior to outline v0.64.4. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...

Akashi 输入验证错误漏洞

Akashi is an Attorney Online 2 C++ server open-sourced by Attorney Online. Versions of Akashi prior to 1.3 suffer from an Input Validation Error vulnerability that stems from an attacker being able to make illegal modifications using a specially crafted evidence package, causing the server to cra...