CVE-2022-45290

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

Arbitrary file deletion

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

Kbase Doc 路径遍历漏洞

Kbase Doc is an online preview and editing system for documents by Eko Zhan, an individual developer. A security vulnerability exists in Kbase Doc v1.0, which originates from the deletion of an arbitrary file contained in the component /web/IndexController.java...

CVE-2022-45290

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

CVE-2022-45290

CVE-2022-45290 affects Kbase Doc v1.0, with an arbitrary file deletion vulnerability in the component /web/IndexController.java. The CVSS 3.1 data indicates a CRITICAL severity (base score 9.1) with Network attack vector, no privileges required, no user interaction, and impact to both integrity a...

CVE-2022-45290

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

PT-2022-27459 · Kbase Doc · Kbase Doc

Name of the Vulnerable Software and Affected Versions: Kbase Doc version 1.0 Description: The issue is related to an arbitrary file deletion vulnerability. It affects the component /web/IndexController.java. There is no information provided about the estimated number of potentially affected devic...

PT-2022-23626 · Unknown · Webvendome

Name of the Vulnerable Software and Affected Versions: webvendome affected versions not specified Description: The issue is related to SQL Injection in the DocNumber parameter. It can be exploited through a GET request to the /webvendome/showfiles.aspx endpoint with a specially crafted DocNumber...

qt5-doc bug fix and enhancement update

An update is available for qt5-doc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.1...

Path traversal

A Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to read files...

qt5-doc bug fix and enhancement update

An update is available for qt5-doc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...

CLSA-2022-1667495485 expat: Fix of CVE-2022-43680

CVE-2022-43680: Fix overeager DTD destruction...

Malicious code in waffles-next-doc-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d0d50f724e914440d501dc63fdc4d2a16d56acc44921cedd418cb25aa1508a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7031 Malicious code in waffles-next-doc-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d0d50f724e914440d501dc63fdc4d2a16d56acc44921cedd418cb25aa1508a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PwnDoc 授权问题漏洞

PwnDoc is a software application. Penetration test report generator. A security vulnerability exists in PwnDoc version 0.5.3, which stems from a vulnerability that could allow a remote attacker to identify valid user account names by exploiting the response time of authentication attempts...

USN-5587-1: curl vulnerability | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description Axel Chong discovered that when curl accepted and sent back cookies containing control bytes that a HTTPS server might return a 400 Bad Request Error response. A malicious cookie host...

iso-doc-pro.fr Cross Site Scripting vulnerability OBB-2928583

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the PDF-XChange PDF document viewing and editing program, related to the occurrence of operations outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious DOC file from a remote location...

Ubuntu: Security Advisory (USN-374-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PDF-XChange Editor Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...