5629 matches found
CVE-2022-29816
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible...
Jetbrains IntelliJ IDEA 代码注入漏洞
JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains Czech Republic.JetBrains IntelliJ IDEA versions prior to 2022.1 contain a code injection vulnerability that could be exploited to execute native code via HTML descriptions in custom JSON...
CVE-2022-22275
Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy until TCP handshake potentially resulting in Denial of Service DoS attack if a target host is vulnerable...
The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, arises due to the failure to take measures to eliminate special elements used in the operating system’s command set. This vulnerability allows a perpetrator to execute arbitrary code.
The vulnerability of Fortinet FortiWLM’s WLAN access point and LAN switch management systems exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a...
The vulnerability of the Exif extension in the PHP programming language interpreter allows a perpetrator to trigger a service failure.
The vulnerability of the Exif extension in the PHP programming language interpreter arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the openssl extension (ext/openssl/openssl.c) in the PHP programming language interpreter allows a attacker to cause a service failure.
The vulnerability of the openssl extension ext/openssl/openssl.c in the PHP programming language interpreter is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the ext/spl/spl_array.c component of the PHP interpreter allows a attacker to cause a service failure or potentially cause other effects.
The vulnerability of the ext/spl/splarray.c component of the PHP interpreter exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or potentially have other adverse effects using specially created serialized data...
CVE-2022-21497
Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2022-21447
Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft component: Advising Notes. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2022-21421
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. Supported versions that are affected are 5.5.0.0.0, 5.9.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker wit...
HTTP Request Smuggling in twisted.web
...
The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, arises due to the failure to take measures to eliminate special elements used in the operating system’s command set. This vulnerability allows a perpetrator to execute arbitrary commands.
The vulnerability of Fortinet FortiWLM’s WLAN access point and LAN switch centralized management system exists due to the failure to take measures to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary...
The vulnerability of the Mediation Engine component of the Oracle Communications Operations Monitor system allows a perpetrator to gain access to modify, add, or delete data.
The vulnerability of the Mediation Engine component of the Oracle Communications Operations Monitor visualization and monitoring system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read access to data o...
The vulnerability of the Intelligence component of the Oracle Sourcing supply management platform’s RFx Creation platform allows a hacker to gain read, modify, add, or delete access to data.
The vulnerability of the Intelligence component of the Oracle Sourcing supply management platform’s RFx Creation platform is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain read, modify, add, or delete access to data using the HTTP...
envoy: Use-after-free when tunneling TCP over HTTP
A flaw was found in envoy. If a downstream source disconnects during upstream connection establishment when tunneling TCP over HTTP, a use-after-free can occur, resulting in a denial of service...
CVE-2022-26627
Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file...
The vulnerability of the Expenses component in the Oracle Project Costing calculation service’s CurrencyOverride feature allows a malicious actor to gain unauthorized access to create, modify, or delete data.
The vulnerability of the Expenses component in the Oracle Project Costing calculation service’s CurrencyOverride feature is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to create, modify, o...
The vulnerability of the Kubernetes cluster management software, related to errors in processing hypertext links, allows a hacker to access confidential data.
The vulnerability of the Kubernetes cluster management software is related to errors in processing hypertext links. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...