1628 matches found
sememos/memos vulnerable to Improper Handling of Values
In usememos/memos 0.9.0 and prior, an attacker can post malicious content to another user's memos page via POST request...
CVE-2022-4851
Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...
Input validation
Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4851 Improper Handling of Values in usememos/memos
Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4851
The CVE-2022-4851 entry refers to usememos/memos prior to version 0.9.1, with the root cause described as improper handling of values. The vulnerability allows an attacker to post malicious content to another user’s memos page via a POST request. Public details across connected documents confirm ...
CVE-2022-37392 Apache Traffic Server: Improperly reading the client requests
Improper Check for Unusual or Exceptional Conditions vulnerability in handling the requests to Apache Traffic Server. This issue affects Apache Traffic Server 8.0.0 to 9.1.2...
CVE-2022-32749 Apache Traffic Server: Improperly handled requests can cause crashes in specific plugins
Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions. This issue affects Apache Traffic Server: from 8.0.0 through 9.1.3...
The vulnerability of the Zoom video conferencing service, related to improper handling of code generation, allows a hacker to execute arbitrary code.
The vulnerability of the Zoom video conferencing service is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Ubuntu 20.04 LTS / 22.04 LTS : Pillow vulnerabilities (USN-5777-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5777-1 advisory. It was discovered that Pillow incorrectly handled the deletion of temporary files when using a temporary directory that contains spaces. An...
CVE-2022-39911
Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass...
CVE-2022-39912
Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T13 allows local attackers to set some setting value in Secure folder...
PT-2022-25105 · Samsung · Samsung Pass
Name of the Vulnerable Software and Affected Versions: Samsung Pass versions prior to 4.0.06.1 Description: The issue is related to an improper check or handling of exceptional conditions in Samsung Pass, allowing an attacker to access Samsung Pass. Recommendations: For versions prior to 4.0.06.1...
Exploit for Use After Free in Foxit Pdf_Editor
CVE-2022-28672 !Twitter Followhttps://img.shields.io/twit...
tokenID that is not minted will be stored into the feeRecipient storage
Lines of code Vulnerability details Impact In the original code, tokenID is incremented just after mint function is executed. Afterwards, tokenID is stored into the feeRecipient storage. As a result, tokenID that is not minted will be stored into the feeRecipient storage. Proof of Concept In the...
CVE-2022-44652
An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system ...
SUSE: Security Advisory (SUSE-SU-2022:4016-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:4015-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Qualcomm 芯片 授权问题漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a security vulnerability that stems from its...