701 matches found
Akeneo PIM Development Repository 代码注入漏洞
Akeneo PIM Development Repository is an Akeneo open source repository . It is used to develop Akeneo PIM products. A code injection vulnerability exists in Akeneo PIM Development Repository versions prior to v5.0.119 and v6.0.53, which originates from a code injection vulnerability that could all...
PT-2022-35966 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns an invalid length check when fetching device IDs. This problem was introduced in version v5.3 and is fixed in Linux Kernel version v6.0.10. The actual impact and attack...
PT-2022-36395 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: The issue concerns an invalid length check when fetching device IDs. This problem was introduced in version v5.3 and is fixed in Linux Kernel version v5.4.225. The actual impact and attack...
PT-2022-24575 · Zkteco · Zkteco Biotime
Name of the Vulnerable Software and Affected Versions: Zkteco BioTime versions prior to 8.5.3 Build:20200816.447 Description: The issue is related to Incorrect Access Control, allowing an authenticated administrator to exploit XSS in a pdf generator when exporting data as a PDF, potentially...
PT-2022-23627 · Intel · Intel Nuc 10 Performance Mini Pcs +1
Name of the Vulnerable Software and Affected Versions: IntelR NUC 10 Performance Kits and IntelR NUC 10 Performance Mini PCs versions prior to FNCML357.0053 Description: The issue is related to improper access control in BIOS firmware, which may allow a privileged user to enable escalation of...
EyesOfNetwork 跨站脚本漏洞
EyesOfNetwork EON is an open source, free IT monitoring solution from the EyesOfNetwork community. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. A cross-site scripting vulnerability exists i...
EyesOfNetwork 跨站脚本漏洞
EyesOfNetwork EON is an open source, free IT monitoring solution from the EyesOfNetwork community. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. A cross-site scripting vulnerability exists i...
AZL-11350 CVE-2022-3474 affecting package bazel for versions less than 5.3.2-1
A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3...
GNU oSIP 输入验证错误漏洞
GNU oSIP is the GNU Foundation's free software library for VoIP applications that implement lower-level session-initiation protocols. The library contains the minimum code base required for any SIP application and provides enough flexibility to implement any SIP extension or behavior. A security...
IBM Rational Change 跨站脚本漏洞
IBM Rational Change is a software tool from IBM Corporation, USA. provides software configuration management functionality for all artifacts related to software development, including source code, documentation and images, as well as final build software executables and libraries. A cross-site...
CVE-2022-34424
Networking OS10, versions 10.5.1.x, 10.5.2.x, and 10.5.3.x contain a vulnerability that could allow an attacker to cause a system crash by running particular security scans...
Dell SmartFabric OS10 缓冲区错误漏洞
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell, USA. A security vulnerability exists in Dell SmartFabric OS10 versions 10.5.1.x, 10.5.2.x, and 10.5.3.x. The vulnerability stems from the fact that an attacker can cause a system crash by running a specific security...
EyesOfNetwork 安全漏洞
EyesOfNetwork EON is an open source, free IT monitoring solution from the EyesOfNetwork community. The solution provides business process configuration tools, generates pop-up windows when events occur in the active queue, and other features.EyesOfNetwork EON 5.3.11 and earlier versions have a...
CVE-2022-3053
creationtimestamp| type| source ---|---|--- 2022-09-26 20:22:54+00:00| seen| https://t.me/cibsecurity/50507...
CVE-2022-38134
Authenticated subscriber+ Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin = 5.3.5 at WordPress...
CVE-2022-2433
The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input via the 'almrepeatersexport' parameter in versions up to, and including 5.5.3. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they...
PT-2022-19603 · WordPress · Wordpress Infinite Scroll – Ajax Load More
Name of the Vulnerable Software and Affected Versions: WordPress Infinite Scroll – Ajax Load More plugin versions up to, and including, 5.5.3 Description: The issue allows authenticated attackers with administrative privileges to download arbitrary files hosted on the server due to insufficient...
CVE-2022-2537
creationtimestamp| type| source ---|---|--- 2022-08-29 22:34:19+00:00| seen| https://t.me/cibsecurity/48996...
CVE-2022-37153
creationtimestamp| type| source ---|---|--- 2022-08-24 16:27:36+00:00| seen| https://t.me/cibsecurity/48640 2022-08-25 15:01:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6670 2025-09-17 21:02:39+00:00| seen|...
Eyes of Network Web 跨站请求伪造漏洞
Eyes of Network Web is a global regulatory solution for hardware status of devices, operating systems, standard applications, business applications and performance from the Eyes of Network Web community. A security vulnerability exists in Eyes of Network Web version 5.3, which stems from a lack o...