CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

GTAB Software Tabit 信息泄露漏洞

GTAB Software Tabit is a full-featured program from GTAB Software for creating, playing and printing fingerstyle scores for guitar, bass or banjo. GTAB Software Tabit suffers from an information disclosure vulnerability that stems from several APIs on its web system displaying unauthorized...

CVE-2022-2739

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive...

Huawei JAD-AL50 安全漏洞

Huawei JAD-AL50 is a cell phone from Huawei, a Chinese company. A security vulnerability exists in Huawei JAD-AL50. An attacker can exploit the vulnerability to access certain resources on the attacked device...

CVE-2022-2634

An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed...

Information disclosure

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

Intel Team Blue 安全漏洞

Intel Team Blue is a mobile application from Intel Corporation. Intel Team Blue has a security vulnerability that stems from insufficient credential protection, which can be exploited by an attacker to obtain sensitive information...

The vulnerability of the Jenkins Compuware ISPW Operations Plugin involves a violation of data protection mechanisms, allowing an attacker to gain unauthorized access to protected information related to system configuration settings.

The vulnerability of the Jenkins Compuware ISPW Operations Plugin is related to a breach of data protection mechanisms. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected system configuration information...

CVE-2022-22144

A hard-coded password vulnerability exists in the libcommonprod.so prodchangerootpasswd functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. During system startup this functionality is always called, leading to a known root password. An attacker does not have to do anything to trigger this...

CVE-2022-36830

PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent...

PT-2022-17922 · Git +2 · Planka +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: This issue allows an attacker to read sensitive files, including configuration files and the /proc/self/environ file, which contains environment variabl...

Authentication Bypass

firefox is vulnerable to authentication bypass. The vulnerability exists because preload cache bypasses subresource integrity when loading a script which allows an attacker to gain access to internal system and perform unwanted action...

Western Digital My Cloud 跨站脚本漏洞

Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in Western Digital My Cloud. An attacker exploited the vulnerability to gain access to a drive that is being backed up...

Dell EMC NetWorker 安全漏洞

Dell EMC NetWorker is a suite of unified backup and recovery software from Dell USA. The software provides backup and recovery, deduplication elimination, backup reporting, etc. Perm is a permanent efficient mapping of short reads with periodic interval seeds. A security vulnerability exists in...

Oracle Financial Services Applications Input Validation Error Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The products include core banking, online banking and property management, etc. FLEXCUBE Universal Banking is one of the Internet and mobile banking solution components. An input validation error...

Samsung Finder Information Disclosure Vulnerability (CNVD-2022-76481)

Samsung Finder is a Finder feature for Samsung Samsung mobile devices.Samsung Finder is vulnerable to an information disclosure vulnerability stemming from an implicit intent hijacking in the Finder, which could be exploited by an attacker to access certain protected information with Finder...

Oracle JD Edwards Products 输入验证错误漏洞

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle. The products provide application modules for financial management, project management and asset lifecycle management. An input validation error vulnerability exists in Oracle JD...

Design/Logic Flaw

An attacker that gains service access to the FSP POWER9 only or gains admin authority to a partition can compromise partition firmware...

Jenkins XPath Configuration Viewer存在未明漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plug-ins to support building, deploying, and automating any project. Jenkins XPath Configuration Viewer has a security vulnerability that stems...