PT-2022-23787 · H3C · H3C Gr-1200W

Name of the Vulnerable Software and Affected Versions: H3C GR-1200W MiniGRW1A0V100R006 Description: A stack overflow issue was discovered in the function UpdateWanModeMulti. Recommendations: For H3C GR-1200W MiniGRW1A0V100R006, as a temporary workaround, consider disabling the UpdateWanModeMulti...

JVN#46239102: Multiple vulnerabilities in Exment

Exment provided by Kajitori Co.,Ltd contains multiple vulnerabilities listed below. Reflected cross-site scripting CWE-79 - CVE-2022-38080 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVSS v2| AV:N/AC:H/Au:S/C:N/I:P/A:N| Base Score: 2.1...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : systemd-presets-common-SUSE (SUSE-SU-2022:2866-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2866-1 advisory. - CVE-2022-1706: Fixed accessible configs from unprivileged containers in VMs running on VMware products...

PT-2022-23820 · Bluecms · Bluecms

Name of the Vulnerable Software and Affected Versions: BlueCMS version 1.6 Description: The issue is related to SQL injection, specifically located in line 55 of the admin/model.php file. Recommendations: For BlueCMS version 1.6, consider restricting access to the admin/model.php file until a pat...

SUSE SLES15: ruby2.5-rubygem-rails-html-sanitizer / etc (SUSE-SU-2022:2870-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2870-1 advisory. - CVE-2022-32209: Fixed a potential content injection under specific configurations bsc1201183. Tenable has extracted the preceding...

PT-2022-21204 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 WWBN AVideo dev master commit 3f7c0364 Description: An issue exists in the login functionality due to an improper password check. This allows an attacker with a user's password hash to directly log into the account,...

PT-2022-23272 · Unknown · Clinic'S Patient Management System

Name of the Vulnerable Software and Affected Versions: Clinic's Patient Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the patients.php file. This means that an attacker could potentially inject malicious scripts into the website, which could then ...

PT-2022-4370 · Unknown · Greenlight

Name of the Vulnerable Software and Affected Versions: Greenlight versions prior to 2.13.0 Description: The issue is related to an open redirect vulnerability in the Login page of Greenlight, which is an end-user interface for BigBlueButton servers. This vulnerability is due to the unchecked valu...

ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent

Description Impact In ReactPHP's HTTP server component versions below v1.7.0, when ReactPHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like Host- and Secure- confused with cookies that decode to such prefix, thus leading to ...

PT-2022-23897 · Unknown · Dolphinphp

Name of the Vulnerable Software and Affected Versions: DolphinPHP version 1.5.1 Description: The issue concerns Cross Site Scripting XSS via the Background - System - system function - configuration management. This allows for potential malicious script injection. Recommendations: For DolphinPHP...

GHSA-MJVM-MHGC-Q4GP Incorrect parsing of EVM reversion exit reason in RPC

Impact A low severity security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM reversion. In release build, this would cause the exit reason being incorrectly parsed and returned by RPC. In debug build, this would cause an overflow panic. No action is...

GHSA-5HM8-VH6R-2CJQ CodeIgniter Shield Vulnerable to SameSite Attackers Bypassing the CSRF Protection

Impact This vulnerability may allow SameSite Attackers to bypass the CodeIgniter4 CSRF protection mechanism with CodeIgniter Shield. For this attack to succeed, the attacker must have direct or indirect, e.g., XSS control over a subdomain site e.g., https://a.example.com/ of the target site e.g.,...

Nodejs ‘undici’ vulnerable to CRLF Injection via Content-Type

Impact = [email protected] users are vulnerable to CRLF Injection on headers when using unsanitized input as request headers, more specifically, inside the content-type header. Example: import request from 'undici' const unsanitizedContentTypeInput = 'application/json\r\n\r\nGET /foo2 HTTP/1.1' await...

@actions/core has Delimiter Injection Vulnerability in exportVariable

Impact The core.exportVariable function uses a well known delimiter that attackers can use to break out of that specific variable and assign values to other arbitrary variables. Workflows that write untrusted values to the GITHUBENV file may cause the path or other environment variables to be...

GHSA-7R3H-M5J6-3Q42 @actions/core has Delimiter Injection Vulnerability in exportVariable

Impact The core.exportVariable function uses a well known delimiter that attackers can use to break out of that specific variable and assign values to other arbitrary variables. Workflows that write untrusted values to the GITHUBENV file may cause the path or other environment variables to be...

Bots using py-cord as Discord API wrapper are vulnerable to shutdowns through remote code execution

Impact py-cord is a an API wrapper for Discord written in Python. Bots using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the application.commands scope without the bot scope. Currently, it appears that all public bots that use slash commands are...

Exposure of Resource to Wrong Sphere

Ethermint is an Ethereum library. In Ethermint running versions before v0.17.2, the contract selfdestruct invocation permanently removes the corresponding bytecode from the internal database storage. However, due to a bug in the DeleteAccountfunction, all contracts that used the identical bytecod...

PT-2022-22602 · Unknown · Kkfileview

Name of the Vulnerable Software and Affected Versions: kkFileView version 4.1.0 Description: The issue is related to multiple cross-site scripting XSS vulnerabilities. These vulnerabilities can be exploited via the urls and currentUrl parameters at the /controller/OnlinePreviewController.java...

PT-2022-23249 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC versions 2.1-DEV-revUNKNOWN-master Description: A Null Pointer dereference issue exists via the function gf filter pid set property full at filter core/filter pid.c:5250, which causes a Denial of Service DoS. Recommendations: For GPAC...

PT-2022-23261 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS versions 5.7.94 through 5.7.97 Description: A remote code execution issue was found in the member toadmin.php file. Recommendations: For versions 5.7.94 through 5.7.97, as a temporary workaround, consider disabling access to the membe...