Shenzhen Fujia Technology OurPhoto 安全漏洞

Shenzhen Fujia Technology OurPhoto is a cloud photo frame software from Shenzhen Fujia Technology, China. It allows you to share photos and video files directly on your cell phone. A security vulnerability exists in Shenzhen Fujia Technology OurPhoto version 1.4.1 that stems from the usertoken...

Google TensorFlow has an unspecified vulnerability (CNVD-2023-15773)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc...

PT-2022-27158 · Totolink · Totolink Lr350

Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: The issue is a post-authentication buffer overflow that occurs via the parameters week, sTime, and eTime in the setParentalRules function. Recommendations: For TOTOLINK LR350 version...

CVE-2022-44193

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endminute...

Here's How to Ensure Your Incident Response Strategy is Ready for Holiday Hackers

The best line of defense against holiday hacking schemes is a comprehensive incident response strategy that focuses on end-user vulnerabilities. The holiday season is upon us and with it a slew of cybersecurity scams preying on end-user vulnerabilities. Because employees often use their business...

November 22, 2022—KB5020032 (OS Build 20348.1311) Preview

None None...

flac security update

1.3.3-10 - handle end-of-stream when encoding with verification CVE-2021-0561...

PT-2022-26796 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the endDate parameter at the "getOrderReport.php" endpoint. Recommendations: For Billing System...

Nginx End of Life (EOL) Detection

The Nginx version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

GHSA-4WFH-48V4-3R84 Cross-site Scripting in Apache Hama

Missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. Since Apache Hama is EOL, we do not expect these issues to be fixed...

CVE-2022-45470

missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. Since Apache Hama is EOL, we do not expect these issues to be fixed...

PT-2022-27526 · Apache · Apache Hama

Name of the Vulnerable Software and Affected Versions: Apache Hama affected versions not specified Description: The issue is related to missing input validation in Apache Hama, which may cause information disclosure through path traversal and cross-site scripting XSS. Since Apache Hama is...

CVE-2022-44001

An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services can be bypassed...

Authentication flaw

An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services can be bypassed...

CVE-2022-44001

An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services can be bypassed...

November 17, 2022—KB5021654 (OS Build 14393.5502) Out-of-band

None None...

PT-2022-27063 · Unknown · Backclick Professional

Name of the Vulnerable Software and Affected Versions: BACKCLICK Professional version 5.9.63 Description: An issue was discovered where user authentication for accessing the CORBA back-end services can be bypassed. Recommendations: For BACKCLICK Professional version 5.9.63, at the moment, there i...

CVE-2022-44008

An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation, arbitrary local files can be retrieved by accessing the back-end Tomcat server directly...

PT-2022-27070 · Apache · Apache Tomcat

Name of the Vulnerable Software and Affected Versions: BACKCLICK Professional version 5.9.63 Description: An issue was discovered due to improper validation, allowing arbitrary local files to be retrieved by accessing the back-end Tomcat server directly. Recommendations: For BACKCLICK Professiona...

F5 Networks BIG-IP : Appliance mode iControl REST vulnerability (K13325942)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.3 / 15.1.8.1 / 16.1.3.3 / 17.0.0.2 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K13325942 advisory. - In all versions of BIG-IP, when running in Appliance mode, an authenticated user...