6286 matches found
EulerOS 2.0 SP5 : libdb (EulerOS-SA-2022-2274)
According to the versions of the libdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and pri...
db-photographe78.fr Cross Site Scripting vulnerability OBB-2850476
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-4177
Name of the Vulnerable Software and Affected Versions Device42 CMDB version 18.01.00 and prior versions Description The issue exists due to the lack of neutralization of special elements used in the operating system command by the db optimize function. This allows a remote attacker to execute...
Cross site scripting
The Contact Form DB WordPress plugin before 1.8.0 does not sanitise and escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting...
CVE-2022-2116
CVE-2022-2116 affects the WordPress plugin Elementor Contact Form DB prior to version 1.8.0. The root cause is insufficient sanitisation/escaping of certain parameters when echoed back in HTML attributes, leading to a Reflected Cross-Site Scripting vulnerability. The exposed impact is a client-si...
CVE-2022-2116 Elementor Contact Form DB < 1.8.0 - Reflected Cross-Site Scripting
The Contact Form DB WordPress plugin before 1.8.0 does not sanitise and escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting...
WordPress plugin Contact Form DB 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2022-2116: Improper Neutralization of Input During Web Page Generation
The Contact Form DB WordPress plugin before 1.8.0 does not sanitise and escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting...
PT-2022-4178 · Device42 · Device42 Cmdb
Name of the Vulnerable Software and Affected Versions: Device42 CMDB versions prior to 18.01.00 Description: The issue is related to improper access control in the Device42 Asset Management Appliance, specifically in the /Exago/WrImageResource.adx route. This allows an unauthenticated attacker to...
com.gilt.apidoc:apidoc-api_2.11 (>=0.6.0, <=0.6.13), com.samsix:s6-db (>=1.0.1, <=2.0.1) +1 more potentially affected by CVE-2022-31197 via org.postgresql:postgresql (9.3-1101-jdbc4)
org.postgresql:postgresql MAVEN version 9.3-1101-jdbc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.gilt.apidoc:apidoc-api2.11 =0.6.0, =1.0.1, =0.5.0, =0.5.5 Source cves: CVE-2022-31197 Source...
Information Disclosure
centreon/centreon is vulnerable to information disclosure. Lack of proper validation of user supplied strings while processing virtual metrics inDB-Func.php allows authenticated attackers to gain access to confidential user information such as stored credentials...
CVE-2022-1853
Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...
CVE-2022-1853
Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...
Double free
Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...
CVE-2022-1853
Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...
CVE-2022-1853
Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...
CVE-2022-1853
Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...
CVE-2022-1853
CVE-2022-1853 involves a use-after-free in IndexedDB in Google Chrome, prior to version 102.0.5005.61. The underlying issue allowed a remote attacker to potentially escape the Chrome sandbox via a crafted HTML page. Connected sources confirm the flaw affects Chrome’s IndexedDB handling and was ad...
