17638 matches found
CVE-2022-31032
Tuleap prior to version 13.9.99.58 is affected. The vulnerability arises from improper authorization verification when creating projects or trackers from template projects, allowing information disclosure from those templates. Remediation: upgrade to Tuleap 13.9.99.58 or newer. The available sour...
CVE-2022-31076
KubeEdge vulnerability CVE-2022-31076 affects CloudCore’s UDS Server. A crafted message can trigger a nil-pointer dereference when the unixsocket switch is enabled in cloudcore.yaml, crashing CloudCore. Impact is local to the host network and assumes the attacker is an authenticated Cloud user; e...
amillion-live.de Cross Site Scripting vulnerability OBB-2688285
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
2022 Workshop on Economics and Information Security (WEIS)
I did not attend WEIS this year, but Ross Anderson was there and liveblogged all the talks...
CVE-2022-0722
CVE-2022-0722 affects the parse-url library in the GitHub repo ionicabizau/parse-url prior to version 7.0.0, enabling exposure of sensitive information to an unauthorized actor. The vulnerability is a client-visible information disclosure, capable of being triggered by crafted requests that leak ...
PT-2022-21880 · Debian +3 · Debian +3
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a security problem, but details are not provided. Recommendations: At the moment, there is no information about a newer...
CVE-2022-29096
Dell Wyse Management Suite before 3.7 (3.6.1 and below) contains a Reflected Cross-Site Scripting vulnerability in the saveGroupConfigurations page. An authenticated attacker could inject malicious HTML/JavaScript, running in the victim’s browser context and enabling information disclosure, sessi...
CVE-2022-29578
Summary of CVE-2022-29578 : Meridian Cooperative Utility Software (versions 22.02 and 22.03) has an improper access control flaw that could allow a remote attacker to disclose private user information such as name, address, and daily energy usage. The issue is rooted in access control (CWE-284) a...
CVE-2021-20544
CVE-2021-20544 affects IBM Jazz Team Server versions 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2. The issue is a server-side request forgery (SSRF) vulnerability that could allow an authenticated attacker to cause the server to issue unauthorized requests from the system, enabling network enumeration o...
CVE-2021-20355
The CVE-2021-20355 affects IBM Jazz Team Server versions 6.0.6–7.0.2, where the HTTPOnly flag is not set on cookies, enabling a remote attacker to obtain sensitive data from cookies. The issue is documented across multiple sources (IBM bulletin and CVE records). Remediation is available via IBM i...
CVE-2022-2102
CVE-2022-2102 affects Secheron SEPCOS Control and Protection Relay. Limited uploads by file extension checks can be bypassed, enabling an attacker to intercept the initial upload response, modify code, and trigger arbitrary file uploads to a location where PHP scripts may execute. Affected firmwa...
CVE-2021-30983
creationtimestamp| type| source ---|---|--- 2022-06-24 12:31:59+00:00| seen| https://t.me/CyberSecurityTechnologies/6263 2022-06-24 19:34:31+00:00| seen| https://t.me/truesecator/3099 2022-07-04 20:00:05+00:00| seen| https://t.me/truesecator/3129 2023-06-14 21:10:04+00:00| seen|...
CVE-2022-32209
CVE-2022-32209 affects rails-html-sanitizer: if an application overrides allowed_tags to include both 'select' and 'style', a cross-site scripting (XSS) vulnerability may be exploitable. The issue is triggered when developers configure sanitizer via Rails config, sanitize helper, or SafeListSanit...
CVE-2022-2126
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
MAL-2022-255 Malicious code in @evilpacket/art (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7108845366895c101be321f10368ad60c0b8d5398e041a32027dc775fc37581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7330 Malicious code in yarn-design-system-rc-tooltip (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 843c6a1e32f309a04455bd199d97770cd7c13f9fc26ab137fe28dd519efd3e9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2013 Malicious code in colors-design (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e59ac2b2a06452d5c70fe49aaf0cb6baba1976d170cb46fb2f67bda44011db6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5953 Malicious code in sc-paul (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad54f4ed59a7b7c15aa41bdea193e0d193255c3effdbde8b9877bb5fde32d53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...