11459 matches found
Databasir 信任管理问题漏洞
Databasir is a relational database model document management platform for teams. A security vulnerability exists in Databasir 1.01, which stems from the fact that an attacker can use hard-coded login credentials to generate any user's login credentials and log in to the backend of a service locat...
Ubuntu: Security Advisory (USN-5377-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-24844
Gin-vue-admin is affected by a SQL injection in the server/service/system/sys_auto_code_pgsql.go path when using PostgreSQL and JWT-based authentication. The issue exists in versions prior to 2.5.1 and is resolved by upgrading to 2.5.1; there are no publicly documented workarounds in the provided...
USN-5377-1 linux-bluefield vulnerabilities
It was discovered that the network traffic control implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-1055 Yiqi Sun and Kevin Wang discovered that the...
USN-5377-1: Linux kernel (BlueField) vulnerabilities
It was discovered that the network traffic control implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-1055 Yiqi Sun and Kevin Wang discovered that the...
Jfinal CMS Cross-Site Scripting Vulnerability (CNVD-2022-81357)
Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.1.0 has a cross-site scripting vulnerability, the vulnerability...
CVE-2022-22560
Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline...
Hardcoded credentials
Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline...
PT-2022-3654 · Mcafee · Epolicy Orchestrator (Epo) Extension Of Ma
Name of the Vulnerable Software and Affected Versions: ePolicy Orchestrator ePO extension of MA versions prior to 5.7.6 Description: A blind SQL injection issue exists in the ePolicy Orchestrator ePO extension of MA, related to the failure to neutralize special elements used in SQL queries. This...
CVE-2022-27111
JfinalCMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it...
CVE-2022-27111
JfinalCMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it...
CVE-2022-27111
CVE-2022-27111 affects Jfinal_CMS 5.1.0. The vulnerability is a cross-site scripting (XSS) flaw where the feedback feature can be abused to send malicious code to the administrator backend and have it executed. Root cause suggested by CNVD/CVE sources points to improper handling of user-supplied ...
CVE-2022-27111
JfinalCMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it...
CVE-2022-27111
JfinalCMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it...
Jfinal CMS跨站脚本漏洞
Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.1.0 has a cross-site scripting vulnerability, the vulnerability...
KevinLAB Building Energy Management System 安全漏洞
KevinLAB Building Energy Management System is a building energy management system from KevinLAB Korea.An access control error vulnerability exists in KevinLAB Building Energy Management System version 1.0.0, which stems from a network system or The product does not properly restrict access to...
USN-5368-1: Linux kernel vulnerabilities
It was discovered that the BPF verifier in the Linux kernel did not properly restrict pointer types in certain situations. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-23222 It was discovered that the network traffic contro...
Subrion CMS 安全漏洞
Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports a variety of extensions plug-ins and more. A security vulnerability exists in Subrion CMS 4.2.1, which stems from a Remite Code Execution RCE vulnerability by...
Amr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Put the following payload in the "Name of list" field in the User Lists Overview ...