CVE-2022-4157: Undefined Security Weakness

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgoptionid POST parameter before concatenating it to an SQL query in export-votes-all.php. This may allow malicious users with administrator privileges i.e. on multisite...

PT-2022-25166

Name of the Vulnerable Software and Affected Versions typora versions through 1.38 Description The issue allows remote attackers to run arbitrary code via export from the editor, which is a result of a Cross Site Scripting XSS vulnerability. This enables attackers to execute malicious scripts on...

Typora cross-site scripting vulnerability

Typora is a Typora open source editor. Typora version 1.38 cross-site scripting vulnerability , the vulnerability stems from a remote attacker can achieve arbitrary code execution through the editor export operation...

CVE-2022-40011: Improper Neutralization of Input During Web Page Generation

Typora through 1.3.8 allows XSS if a document containing an SVG element with an attacker-controlled onload attribute is exported and then used at a victim's origin...

Outlining a new SiestaGraph backdoor

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Foreign Affairs Office of an Association of Southeast Asian Nations ASEAN member is targeted by multiple threat actors who are coordinating active campaigns via a vulnerable Microsoft Exchange server...

SUSE-SU-2022:4501-1 Security update for ceph

This update for ceph fixes the following issues: ceph was updated to the Pacific release 16.2.9-536-g41a9f9a5573: + bsc1195359, bsc1200553 rgw: check bucket shard init status in RGWRadosBILogTrimCR + bsc1194131 ceph-volume: honour osddmcryptkeysize option CVE-2021-3979 + bsc1200064, Remove last...

CVE-2022-3605

The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV, leading to a CSV injection vulnerability...

PT-2025-38418

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel contains a flaw in the Network File System NFS implementation nfsd related to handling reference counts during NFSv4.1 operations. Specifically, a double svc xprt put ca...

PT-2022-7125 · Keepass +2 · Keepass +3

Name of the Vulnerable Software and Affected Versions: KeePass versions 2.53 and earlier KeePass through 2.53 in a default installation Description: The issue is related to the storage of critical information in an unencrypted manner. An attacker with write access to the XML configuration file ca...

CVE-2022-45026

An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process...

PT-2022-27377 · Unknown · Markdown Preview Enhanced

Name of the Vulnerable Software and Affected Versions: Markdown Preview Enhanced versions 0.6.5 through 0.19.6 Description: An issue allows attackers to execute arbitrary commands during the GFM export process. Recommendations: For versions 0.6.5 through 0.19.6, at the moment, there is no...

CVE-2022-45026: Improper Neutralization of Special Elements used in an OS Command

An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process...

CVE-2022-45026

An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process...

CVE-2022-45026

An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process...

Low: Red Hat Security Advisory: RHACS 3.73 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security RHACS. The updated image includes new features and bug fixes. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Symantec Endpoint Protection Bypass Password Protection

The vulnerability of the Symantec Endpoint Protection antivirus software is related to the possibility of bypassing security elements. Exploiting this vulnerability could allow a hacker to circumvent password protection for security policy import/export...

OPENSUSE-SU-2022:10230-1 Security update for cherrytree

cherrytree was updated to version 0.99.49+3: Legacycanonicalizefilename: manage empty filename, ghgiuspen/cherrytree2118 added command line option '--anchor AnchorName' that in addition to existing '--node NodeName' allows to open a document focusing an anchor in a node. Changed non configurable...

CVE-2022-43333

Telenia Software s.r.l TVox before v22.0.17 was discovered to contain a remote code execution RCE vulnerability in the component actionexportcontrol.php...

CVE-2022-37017

Symantec Endpoint Protection Windows agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User...

Security feature bypass

Symantec Endpoint Protection Windows agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User...