MediaTek 芯片安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. The MediaTek chips contain a security vulnerability that stems from a lack of privilege checking, leading to information leakage...

CVE-2022-4872

The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as does not ensure that the option to be updated belong to the plugin, allowing unauthenticated attackers to set arbitrary options to 'no'...

CVE-2022-4368 WP CSV <= 1.8.0.0 - Reflected XSS via CSV Import

The WP CSV WordPress plugin through 1.8.0.0 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, and doe snot have CSRF checks in place as well, leading to a Reflected Cross-Site Scripting...

UNISOC chipset 安全漏洞

UNISOC chipset is an integrated circuit chipset from China's Unisoc Corporation. A security vulnerability exists in the UNISOC chipset that stems from a lack of privilege checking in network services, which could lead to a local privilege escalation that requires system execution privileges...

UNISOC chipset 安全漏洞

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset, which stems from a lack of privilege checking in the Contacts service, which could lead to a local denial of service in the Contacts service without...

UNISOC chipset 安全漏洞

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset, which stems from a lack of privilege checking in the Contacts service, which could lead to a local denial of service in the Contacts service without...

MediaTek 芯片 缓冲区错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in MediaTek Chipsets that stems from a lack of bounds checking in the gpu drm, which could result in a stack overflow, which could lead to a local privilege escalation that...

CVE-2022-28283

The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files that should have been inaccessible. This vulnerability affects Firefox 99...

CVE-2022-4124

The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF checks when deleting popups, which could allow unauthenticated users to delete them...

libxml2: integer overflows with XML_PARSE_HUGE

A flaw was found in libxml2. Parsing a XML document with the XMLPARSEHUGE option enabled can result in an integer overflow because safety checks were missing in some functions. Also, the xmlParseEntityValue function didn't have any length limitation...

UNISOC chipset 缓冲区错误漏洞

The UNISOC chipset is an integrated circuit chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in the UNISOC chipset, which stems from a lack of bounds checking in the wlan driver, which could lead to a local denial of service in the wlan service...

UNISOC chipset 安全漏洞

The UNISOC chipset is an integrated circuit chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC chipset that stems from a lack of privilege checking in the power management service, which could result in setting up the power management service without additiona...

UNISOC chipset 安全漏洞

The UNISOC chipset is an integrated circuit chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC chipset that stems from a lack of privilege checking in the power management service, which could result in setting up the power management service without additiona...

CVE-2022-3511

The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded belongs to the user making the request, allowing a low privileged user, such as subscriber to download arbitrary exported tickets via an IDOR vector...

Jenkins Plugin Cluster Statistics 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site request forge...

Jenkins Plugin Cluster Statistics 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. Jenkins Plugin Cluster...

CVE-2022-3536

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.3 does not have authorisation and proper CSRF checks, as well as does not validate path given via user input, allowing any authenticated users like subscriber to perform PHAR deserialization attacks when they can upload a file, an...

WordPress plugin Role Based Pricing for WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A code issue vulnerability exists in the...

CVE-2022-3208

The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and change it's content via a CSRF attack...

PT-2022-20811 · WordPress · Integration For Billingo & Gravity Forms +2

Name of the Vulnerable Software and Affected Versions: Woo Billingo Plus WordPress plugin versions prior to 4.4.5.4 Integration for Billingo & Gravity Forms WordPress plugin versions prior to 1.0.4 Integration for Szamlazz.hu & Gravity Forms WordPress plugin versions prior to 1.2.7 Description: T...