1258 matches found
PT-2023-16249 · Wireshark +3 · Wireshark +3
Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.6.0 through 3.6.10 Wireshark versions 4.0.0 through 4.0.2 Description: The issue is related to excessive loops in multiple dissectors, which allows for denial of service via packet injection or crafted capture file...
USN-5801-1 vim vulnerabilities
It was discovered that Vim makes illegal memory calls when pasting brackets in Ex mode. An attacker could possibly use this to crash Vim, access or modify memory, or execute arbitrary commands. This issue affected only Ubuntu 20.04 and 22.04 CVE-2022-0392 It was discovered that Vim makes illegal...
WordPress Plugin 404 to Start 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2022-4099
creationtimestamp| type| source ---|---|--- 2023-01-03 00:17:01+00:00| seen| https://t.me/cibsecurity/55762 2025-04-10 18:49:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11308...
PT-2022-11705 · Nagios · Nagios Ncpa
Name of the Vulnerable Software and Affected Versions: Nagios NCPA versions prior to 2.4.0 Description: A vulnerability was found in Nagios NCPA, affecting the file agent/listener/templates/tail.html. The manipulation of the name argument leads to cross-site scripting. The attack can be initiated...
PT-2022-25394 · WordPress · The Return Refund/Exchange For Woocommerce
Name of the Vulnerable Software and Affected Versions: Return Refund and Exchange For WooCommerce WordPress plugin versions prior to 4.0.9 Description: The issue concerns the lack of validation for attachment files uploaded via an AJAX action. This action is accessible to unauthenticated users,...
BigBlueButton 安全漏洞
BigBlueButton is an open source web conferencing system from the BigBlueButton community. A security vulnerability exists in BigBlueButton versions prior to 2.4.0, which stems from exposing sensitive information to unauthorized participants, and affects voting meetings where the attacker is a...
PYSEC-2022-43062
A vulnerability classified as problematic was found in pacparser up to 1.3.x. Affected by this vulnerability is the function pacparserfindproxy of the file src/pacparser.c. The manipulation of the argument url leads to buffer overflow. Attacking locally is a requirement. Upgrading to version 1.4....
cc.zhaoac:faith-permission (=1.1.0), cc.zhaoac:faith-tool-boot (=1.1.0) +517 more potentially affected by CVE-2022-45688 via cn.hutool:hutool-json (>=4.0.0 <=5.8.24)
cn.hutool:hutool-json MAVEN version =4.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.3, =2.0.5, =3.0.2 and more Source cves: CVE-2022-45688 Source advisory: OSV:GHSA-3VQJ-43W4-2Q58...
CVE-2022-4403
creationtimestamp| type| source ---|---|--- 2022-12-11 18:20:13+00:00| seen| https://t.me/cibsecurity/54264...
PT-2022-24711
Name of the Vulnerable Software and Affected Versions Clerk WordPress plugin versions prior to 4.0.0 Description The issue affects the validation function for all API requests, making it vulnerable to time-based attacks due to the usage of comparison operators to verify API keys against the ones...
CVE-2022-44354
SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file...
Contec SolarView Compact 代码问题漏洞
Contec SolarView Compact is an application system from Contec Japan. It provides photovoltaic power generation measurement system. A file upload vulnerability exists in Contec SolarView Compact versions 4.0 and 5.0. The vulnerability stems from the application's lack of effective validation of...
CVE-2022-45073
Cross-Site Request Forgery CSRF vulnerability in REST API Authentication plugin = 2.4.0 on WordPress...
WordPress plugin REST API Authentication 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2022-4051
creationtimestamp| type| source ---|---|--- 2022-11-17 20:17:48+00:00| seen| https://t.me/cibsecurity/53071...
CVE-2022-43295
XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy at xpdf/Stream.cc:795...
Xiongmai Camera XM-JPR2-LX 安全漏洞
Xiongmai Camera XM-JPR2-LX is a video surveillance device from China Xiongmai Technology Xiongmai Company. A security vulnerability exists in the Xiongmai Camera XM-JPR2-LX version V4.02.R12.A6420987.10002.147502.00000, which originates from the vulnerability of the device to account theft...
PT-2022-11206 · Unknown · Xpdf-Reader
Name of the Vulnerable Software and Affected Versions: xpdfreader version 4.03 Description: The issue is related to a Buffer Overflow. Recommendations: For xpdfreader version 4.03, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
