2045 matches found
Siren Investigate 安全漏洞
Siren Investigate is a front-end to the Siren platform from Siren Ireland, allowing the creation of dashboards, charts, link analysis, alerts and more. A security vulnerability exists in Siren Investigate versions prior to 12.1.7 that stems from the presence of ACL bypasses on global objects...
PT-2023-13793 · WordPress · Wp User
Name of the Vulnerable Software and Affected Versions: WP User WordPress plugin versions prior to 7.0 Description: The issue is related to a SQL injection that can be exploited by unauthenticated users due to improper sanitization and escaping of a parameter in a SQL statement. Recommendations: F...
memos 访问控制错误漏洞
memos is an open source hosted memo center with knowledge management and social features. An access control error vulnerability exists in versions of memos prior to 0.9.1, which can be exploited by an attacker to change any user's email and username, as well as display name...
DEBIAN-CVE-2022-46871
An out of date library libusrsctp contained vulnerabilities that could potentially be exploited. This vulnerability affects Firefox 108...
PT-2022-16022 · Unknown · Bigbluebutton
Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.4-rc-6 Description: The moderators-only webcams lock setting in BigBlueButton is not enforced on the backend. This allows an attacker to subscribe to viewers' webcams, even when the lock setting is applied, b...
DEBIAN-CVE-2022-4437
Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
UBUNTU-CVE-2022-3509
A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes...
WordPress plugin Dokan SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...
PrestaShop 信息泄露漏洞
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. An information disclosure vulnerability exists in PrestaShop versions prior to 1.7.8.8. The vulnerability...
CVE-2022-38336
An access control issue in MobaXterm before v22.1 allows attackers to make connections to the server via the SSH or SFTP protocols without authentication...
WordPress plugin Chaty SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...
UBUNTU-CVE-2022-3491
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742...
CVE-2022-2808
Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. This issue affects Prens Student Information System: before 2.1.11...
CVE-2022-2807
SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects Prens Student Information System: before 2.1.11...
Tailscale 访问控制错误漏洞
Tailscale is an open source WireGuard based application from Tailscale. Can provide a secure private network for any size team . An Access Control Error vulnerability exists in versions prior to Tailscale v1.32.3. Attackers use the vulnerability to remotely execute code...
CVE-2022-43452
SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...
Mediatrix 4102 安全漏洞
The Mediatrix 4102 is a VoIP adapter from Mediatrix. A security vulnerability exists in versions prior to Mediatrix 4102 v48.5.2718, which stems from a vulnerability that allows a local attacker to gain root access via the UART port...
Nicholas Piegdon Synthesia 安全漏洞
Nicholas Piegdon Synthesia is a music game by Nicholas Piegdon. A security vulnerability exists in versions prior to Nicholas Piegdon Synthesia 10.7.5567, which stems from the fact that an incorrectly formatted MIDI file can lead to a denial of service attack...
CVE-2022-2450
The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them...