CVE-2022-27588

We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later...

CVE-2022-22368

IBM Spectrum Scale 5.1.0 through 5.1.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 221012...

Zammad 安全漏洞

Zammad is a suite of ticket management software from Zammad Germany. v5.1.0 of Zammad suffers from a denial of service vulnerability that stems from a lack of rate limiting in the forgot password feature, which could be exploited by an attacker to potentially cause a denial of service DoS via a...

CVE-2022-21480

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: User Interface. Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Transportati...

DEBIAN-CVE-2020-28625

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

UBUNTU-CVE-2020-28613

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

Laurent Rineau CGAL 输入验证错误漏洞

CGAL is an open source application by Laurent Rineau. Provides easy access to efficient and reliable geometric algorithms in the form of C++ libraries. A code execution vulnerability exists in CGAL libcgal CGAL-5.1.1 version, which can be exploited by an attacker to craft a badly formatted file...

CVE-2022-27848

Authenticated admin+ user Stored Cross-Site Scripting XSS in Modern Events Calendar Lite WordPress plugin = 6.5.1...

CVE-2022-26250

Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...

CVE-2022-26251

The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges...

Synametrics Technologies SynaMan 安全漏洞

Synametrics Technologies SynaMan is a remote file manager from Synametrics Technologies. A security vulnerability exists in Synametrics Technologies SynaMan v5.1 and below, which can be exploited by an authenticated attacker to execute arbitrary code and elevate privileges via the HTTP interface...

Synametrics Technologies SynaMan 安全漏洞

Synametrics Technologies SynaMan is a remote file manager from Synametrics Technologies, USA. A security vulnerability exists in Synametrics Technologies SynaMan v5.1 and below, which stems from a weak file permission in the software that can be exploited by an authenticated attacker to elevate...

Minor update (5) for Vivaldi Desktop Browser 5.1

Download Vivaldi The following improvements were made since the fourth 5.1 stable, minor update: Chromium Upgraded to 98.0.4758.141 fixes CVE-2022-1096 Main photo byAlisa Anton...

CVE-2022-25523

TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery CSRF which is exploited via a crafted POST request...

CVE-2022-0265

Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1...

CVE-2020-4925

A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599...

CVE-2021-44868

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

CVE-2021-44868

A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do...

CVE-2021-46251

creationtimestamp| type| source ---|---|--- 2022-02-16 02:34:52+00:00| seen| https://t.me/cibsecurity/37548...

H.H.G. Multistore SQL注入漏洞

H.H.G. Multistore is a software designed to manage multiple stores by the German company H.H.G. Multistore. A security vulnerability exists in H.H.G. Multistore v5.1.0 and below that allows an attacker to perform SQL injection via /admin/admin.php?module=adminaccessgroupedit&aagID...