RedHat pesign 代码问题漏洞

pesign is a tool for signing PE-COFF binaries, and is expected to be at least vaguely compliant with the PE and Authenticode specifications. A security vulnerability exists in pesign that stems from the inability of the cmssetpwdata function in the cmscommon.c file to handle NULL pwdata calls fro...

CVE-2022-1461

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1461 Non Privilege User can Enable or Disable Registered in openemr/openemr

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1461

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...

OpenEMR安全漏洞

OpenEMR is an open source medical management system from the Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in versions of OpenEMR prior to 6.1.0.1 that stem...

CVE-2022-1461: Insufficient Granularity of Access Control

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...

PT-2022-30758

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue is related to the mmc host, where an error should be returned when the -enable sdio irq ops is missing. The actual impact and attack plausibility have not yet been proven...

PT-2022-30606

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to the mmc host, where an error is not returned when the -enable sdio irq ops is missing. The actual impact and attack plausibility have not yet been proven...

PT-2022-30690

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to the mmc host, where an error should be returned when the -enable sdio irq ops is missing. The actual impact and attack plausibility have not yet been proven...

PT-2022-30311

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to the mmc host, where an error should be returned when the -enable sdio irq ops is missing. The actual impact and attack plausibility have not yet been proven...

PT-2022-30047

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the mmc host, where an error should be returned when the -enable sdio irq ops is missing. The actual impact and attack plausibility have not yet been proven...

PT-2022-30485

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to the mmc host, where an error is not returned when the -enable sdio irq ops is missing. The actual impact and attack plausibility have not yet been proven...

PT-2022-29403

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.2 Description The issue is related to the mmc host, where an error should be returned when the -enable sdio irq ops is missing. The actual impact and attack plausibility have not yet been proven...

IgniteUp <= 3.4.1 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some fields when high privilege users don't have the unfilteredhtml capability, which could lead to Stored Cross-Site Scripting issues PoC Customise a template from the plugin /wp-admin/admin.php?page=cscstemplates and put the following payload in the...

firefox security update

91.8.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build 91.8.0-1 - Update to 91.8.0...

CVE-2022-1155

Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10...

CVE-2022-1155

Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10...

CVE-2022-1155 Old sessions are not blocked by the login enable function. in snipe/snipe-it

Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10...

CVE-2022-1155: Undefined Security Weakness

Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10...

CVE-2022-0680

The Plezi WordPress plugin before 1.0.3 has a REST endpoint allowing unauthenticated users to update the plzconfigurationtrackerenable option, which is then displayed in the admin panel without sanitisation and escaping, leading to a Stored Cross-Site Scripting issue...