Huawei MindSpore Community数字错误漏洞

Huawei MindSpore Community is an open source deep learning framework from Huawei, China. A security vulnerability exists in Huawei MindSpore Community versions prior to 1.3.0, which stems from a divide-by-0 exception when performing the derived shape operation of the SpaceToBatch operator if the...

CVE-2022-2113

Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.7.2...

CVE-2022-32254

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. A customized HTTP POST request could force the application to write the status of a given user to a log file, exposing sensitive user information that could provide valuable guidance to an attacker...

CVE-2022-2062

Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+...

CVE-2022-1993

Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...

Gogs 路径遍历漏洞

Gogs Go Git Service is a Go-based self-service Git hosting service from the GOGS team that supports creating and migrating public/private repositories, adding and removing repository collaborators, and more. A security vulnerability exists in Gogs versions prior to 0.12.9, which stems from a path...

CVE-2022-1005

The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUESTURI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting XSS in web browsers which do not encode characters...

CVE-2022-30749

Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity...

CVE-2022-30743

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission...

CVE-2022-30732

Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access sensitive information via onActivityResult...

CVE-2022-1285

Server-Side Request Forgery SSRF in GitHub repository gogs/gogs prior to 0.12.8...

CVE-2022-1947

Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3...

DEBIAN-CVE-2022-1886

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

Erudika Para 安全漏洞

Erudika Para is a command line interface from Erudika Bulgaria. A security vulnerability exists in Erudika Para prior to version 1.45.11 that stems from a business logic error...

CVE-2022-1813

OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0...

CVE-2022-29877

A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850...

CVE-2022-1730

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 18.0.4...

Mangboard commerce package 输入验证错误漏洞

Mangboard commerce package is an e-commerce website plugin from the Korean company Mangboard. A security vulnerability exists in Mangboard commerce package prior to version 1.3.8, which stems from improper input validation. A remote attacker can exploit the vulnerability to manipulate the total...

PYSEC-2022-200

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-28616

A remote server-side request forgery ssrf vulnerability was discovered in HPE OneView versions: Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView...