17619 matches found
CVE-2022-43448
Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...
ISC BIND DoS Vulnerability (CVE-2012-5689) - Linux
ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
CVE-2022-4340
BookingPress WordPress plugin (versions before 1.0.31) is affected by an Insecure Direct Object Reference (IDOR) in the thank-you page. The underlying issue enables unauthenticated users to view booking details (full name, date, time, service) by altering the appointment_id parameter. Reported in...
CVE-2022-3460
CVE-2022-3460 affects Octopus Deploy; certain types of sensitive variables may be unmasked when viewed in the variable preview. The CVSS 3.1 metrics indicate a HIGH impact (7.5) with Network attack vector, Low attack complexity, and no privileges or user interaction required, but confidentiality ...
CVE-2022-43788
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
PUB-A-238117921
Bulletin has no description...
CVE-2021-23058
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2020-2069
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2022-4858
CVE-2022-4858 affects M-Files Server versions prior to 22.10.11846.0. The vulnerability allows insertion of sensitive information into log files, which could enable extraction of sensitive tokens from logs when certain configurations are set. The provided documents indicate remediation by upgradi...
CVE-2022-3064
CVE-2022-3064 relates to go-yaml parsing that can cause CPU/memory resource abuse when handling malicious or large YAML documents. Connected data identifies affected packages and fixes: Podman<5.6.1-2, Buildah<1.41.4-2, and Packer
CVE-2022-2584
CVE-2022-2584 affects go-codec-dagpb (github.com/ipld/go-codec-dagpb). The dag-pb codec can panic when decoding invalid blocks, causing a potential DoS by crashing the application. The issue has been patched in version 1.3.1. Embed: affected component is the dag-pb codec; root cause is panic on i...
IDOR allows to see, update and delete other users shortcuts
Description Even if the endpoint /api/shortcut allow to see the list of your own shortcuts, it is possible to access, modify and delete other users shortcut accessing directly through the IDs. Proof of Concept - Login with one user, and create a shortcut, let's consider it now has the ID 1 - Logi...
CVE-2021-44855
creationtimestamp| type| source ---|---|--- 2022-12-26 07:40:38+00:00| seen| https://t.me/cibsecurity/55333...
GHSA-PPP9-7JFF-5VJ2 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid, vt-cli, terraform-provider-sendgrid-fips, gitleaks, dynamic-localpv-provisioner, hey, dynamic-localpv-provisioner-fips, k3d...
Denial Of Service (DoS)
radare2 is vulnerable to denial of service. The vulnerability exists due to the out-of-bounds read in rbinjavabootstrapmethodsattrnew function of the library, allowing an attacker to read sensitive information from other memory locations or cause an application crash...
CVE-2022-44012
CVE-2022-44012 affects Simmeth Lieferantenmanager (pre-5.6). An issue in the /DS/LM_API/api/SelectionService/InsertQueryWithActiveRelationsReturnId endpoint enables cross-site scripting, allowing an attacker to run JavaScript in a victim’s browser and potentially access the victim’s encrypted pas...
CVE-2022-4734
CVE-2022-4734 affects usememos/memos prior to 0.9.1. The root cause is Improper Removal of Sensitive Information Before Storage or Transfer, leading to exposure of user data to an authenticated user. Public sources in the connected documents describe leaks of names, emails, roles, and OpenID to a...
CVE-2022-43592
CVE-2022-43592 affects OpenImageIO (notably OpenImageIO v2.4.4.2). The issue is an information disclosure in the DPXOutput::close() path: a specially crafted ImageOutput object can leak heap data. Available connected advisories confirm the root cause in DPXOutput::close() and classify the impact ...