Wedding Planner SQL注入漏洞

Wedding Planner is a wedding planner project. Designed to provide users with an easy way to plan their wedding through a web application while using real data, Wedding Planner v1.0 is vulnerable to a SQL injection vulnerability that stems from a missing validation of externally entered SQL...

Cross site scripting

Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 are vulnerable to cross-site scripting attacks when pasting specially crafted content into editable cells. This issue was fixed in version 4.21.3. There are no known workarounds...

Mozilla Thunderbird Security Advisory (MFSA2022-39) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Apple macOS Monterey 安全漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey version 12.5, which stems from an application's ability to access sensitive user data...

WordPress plugin Form Builder CP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2022-24608 · Unknown +1 · Democritus-Strings +1

Name of the Vulnerable Software and Affected Versions: d8s-math version 0.1.0 Description: The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. Recommendations: For version 0.1.0,...

CVE-2022-36074

Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to strip the Authorization header on HTTP downgrade. This can lead to account access exposure and compromise. It is recommended that the Nextcloud Server...

PT-2022-23902 · Stealjs · Stealjs

Name of the Vulnerable Software and Affected Versions: stealjs steal version 2.2.4 Description: A Regular Expression Denial of Service ReDoS flaw was found in the input variable in main.js. This issue can cause a denial of service. Recommendations: For version 2.2.4, consider restricting the inpu...

XWiki 2.0 < 13.10.5, 14.0 < 14.3 CSRF Vulnerability (GHSA-fxwr-4vq9-9vhj)

Xwiki is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

JVN#30900552: EC-CUBE plugin "Product Image Bulk Upload Plugin" vulnerable to insufficient verification in uploading files

EC-CUBE plugin "Product Image Bulk Upload Plugin", a plugin that enables to upload image files, provided by EC-CUBE CO.,LTD. contains an insufficient verification vulnerability when uploading files CWE-20. Exploiting this vulnerability allows a remote unauthenticated attacker to upload arbitrary...

InventoryManagementSystem SQL注入漏洞

InventoryManagementSystem is an inventory management system by Sajan Rajbhandari, an individual developer. It provides an easy way to track products, suppliers, customers, and purchasing and sales information. A security vulnerability exists in InventoryManagementSystem version 1.0, which...

CVE-2022-36422

Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin = 1.89 at WordPress...

PT-2022-24336 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/admin/site/list" API endpoint. This allows for potential unauthorized access to sensitive data. Recommendations: For JFinal CMS...

PT-2022-19603 · WordPress · Wordpress Infinite Scroll – Ajax Load More

Name of the Vulnerable Software and Affected Versions: WordPress Infinite Scroll – Ajax Load More plugin versions up to, and including, 5.5.3 Description: The issue allows authenticated attackers with administrative privileges to download arbitrary files hosted on the server due to insufficient...

pfSense 操作系统命令注入漏洞

pfSense is a set of network firewalls for FreeBSD Linux. A security vulnerability exists in pfSense pfBlockerNG prior to version 2.1.426. A remote attacker could execute arbitrary operating system commands as root via shell metacharacters in the HTTP host header...

CVE-2022-2892

Measuresoft ScadaPro Server Versions prior to 6.8.0.1 uses an unmaintained ActiveX control, which may allow an out-of-bounds write condition while processing a specific project file...

TRENDnet TEW-733GR 代码注入漏洞

The TRENDnet TEW-733GR is a router from TRENDnet, Inc. A code injection vulnerability exists in TRENDnet TEW733GR v1.03B01, which originates from /htdocs/upnpinc/gena.php contains command injection...

TOTOLINK A810R 操作系统命令注入漏洞

The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK A810R version V5.9c.4050B20190424, which stems from a command injection vulnerability via the included component downloadFile.cgi...

PT-2022-24432 · Tenda · Tenda Tx9 Pro

Name of the Vulnerable Software and Affected Versions: Tenda TX9pro version V22.03.02.10 Description: A buffer overflow issue was discovered in the httpd/SetNetControlList component. Recommendations: For Tenda TX9pro version V22.03.02.10, at the moment, there is no information about a newer versi...

PT-2022-23607 · D Link · D-Link Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR845L version A1 Description: The issue concerns an authentication vulnerability. It can be exploited via an AUTHORIZED GROUP=1 value. This is demonstrated by sending a request for "getcfg.php", an API endpoint. Recommendations: For...