Octopus Server 代码问题漏洞

Octopus Server is an automated deployment platform. Octopus Server has a security vulnerability that stems from improper validation of its session token parameter resulting in a session token that may be valid indefinitely...

Juniper Junos OS DoS (JSA69873)

The version of Junos OS installed on the remote host is affected by a denial of service DoS vulnerability. On QFX10000 Series devices using Juniper Networks Junos OS when configured as transit IP/MPLS penultimate hop popping PHP nodes with link aggregation group LAG interfaces, an Improper...

EulerOS 2.0 SP3 : xorg-x11-server (EulerOS-SA-2022-2640)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper...

HyperDown vulnerable to Cross-site Scripting

HyperDown is a markdown parser written for the Chinese website SegmentFault. Improper validation of the href attribute allows for Cross-site Scripting. At publication there are no patched versions, and no known workarounds...

Information Disclosure

github.com/openfga/openfga is vulnerable to information disclosure. The vulnerability is due to improper validation for the streamed-list-objects endpoint in the authorization header, allowing an attacker to gain sensitive information through the objects in the store...

CVE-2022-39355 Discourse Patreon vulnerable to improper validation of email during Patreon authentication

Discourse Patreon enables syncronization between Discourse Groups and Patreon rewards. On sites with Patreon login enabled, an improper authentication vulnerability could be used to take control of a victim's forum account. This vulnerability is patched in commit number...

CVE-2022-2782

In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters...

PT-2022-18608 · Unknown · Octopus Server

Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: The issue arises from improper validation of the session token parameters, allowing a session token to be valid indefinitely. Recommendations: At the moment, there is no information...

CVE-2022-2782

CVE-2022-2782 affects Octopus Server. The root cause is improper validation of session token parameters, making a session token potentially valid indefinitely. Reported CVSS v3.1 metrics indicate high impact to confidentiality and integrity (CRITICAL overall, network vector, no availability impac...

Juniper Junos OS DoS (JSA69915)

The version of Junos OS installed on the remote host is affected by a DoS vulnerability as referenced in the JSA69915 advisory. An Improper Validation of Syntactic Correctness of Input vulnerability in the kernel of Juniper Networks Junos OS Evolved on PTX series allows a network-based,...

CVE-2022-22201

An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service DoS. On SRX5000 Series with SPC3, SRX4000 Series, and vSRX, when...

CVE-2022-22223

On QFX10000 Series devices using Juniper Networks Junos OS when configured as transit IP/MPLS penultimate hop popping PHP nodes with link aggregation group LAG interfaces, an Improper Validation of Specified Index, Position, or Offset in Input weakness allows an attacker sending certain IP packet...

CVE-2022-22228

Juniper Junos OS rpd (routing protocol daemon) is affected by CVE-2022-22228 due to improper validation of input, causing a memory leak that can lead to a DoS when IPv6 packets are sent to configured addresses. Affected releases include 21.1 before 21.1R3-S2; 21.2 before 21.2R3-S1; 21.3 before 21...

CVE-2022-22223 Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.

On QFX10000 Series devices using Juniper Networks Junos OS when configured as transit IP/MPLS penultimate hop popping PHP nodes with link aggregation group LAG interfaces, an Improper Validation of Specified Index, Position, or Offset in Input weakness allows an attacker sending certain IP packet...

PT-2022-16257 · Wisa · Smart Wing Cms

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: This issue could allow a remote attacker to execute remote commands due to improper validation of parameters of certain API constructors. Remote attacke...

CVE-2022-23770

CVE-2022-23770 affects WISA Smart Wing CMS (WISA Korea). The connected documents describe a remote command execution risk caused by improper validation of parameters of certain API constructors, enabling exploits such as directory traversal. The vulnerability is reported across multiple feeds, bu...

Altair HyperView Player H3D File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Altair HyperView Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Remote Code Execution

org.hsqldb:hsqldb is vulnerable to remote code execution. Improper validation of untrusted inputs in supportsJavaMethod function allows an authenticated attacker to upload and execute malicious code on the system under attack...

CVE-2022-36363: Improper Validation of Specified Index, Position, or Offset in Input

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA1 All versions, LOGO! 12/24RCEo 6ED1052-2MD08-0BA1 All versions, LOGO! 230RCE 6ED1052-1FB08-0BA1 All versions, LOGO! 230RCEo 6ED1052-2FB08-0BA1 All versions, LOGO! 24CE 6ED1052-1CC08-0BA1 All versions, LOGO! 24CEo...

Amazon Linux 2 : xorg-x11-server (ALAS-2022-1856)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1856 advisory. A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the request length. CVE-2022-2319 A flaw was foun...