1512 matches found
Design/Logic Flaw
SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR 67258...
CVE-2022-40324
SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR 67258...
CVE-2022-40324: Improper Neutralization of Input During Web Page Generation
SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR 67258...
CVE-2022-38266
An issue in the Leptonica linked library v1.79.0 allows attackers to cause an arithmetic exception leading to a Denial of Service DoS via a crafted JPEG file...
CVE-2022-38266
CVE-2022-38266 affects Leptonica’s library (v1.79.0) and can cause a DoS via a crafted JPEG, due to an arithmetic exception. Multiple connected sources (Mageia advisory MGASA-2022-0472 and Gentoo GLSA-202312-01) confirm Leptonica vulnerability and recommend upgrading to a newer Leptonica release ...
CVE-2022-38266
An issue in the Leptonica linked library v1.79.0 allows attackers to cause an arithmetic exception leading to a Denial of Service DoS via a crafted JPEG file...
linked-list-allocator 缓冲区错误漏洞
linked-list-allocator is a linked-list allocator codebase open-sourced by Rust OSDev. A buffer error vulnerability exists in linked-list-allocator prior to version 0.10.2, which stems from the heap initialization method lacking a minimum size check for a given heap size parameter, which could...
Stripe: [Broken Access Control ] Unauthorized Linking accounts & Linked Accounts info DIsclosure
@mrasg discovered that users of an account with member permissions were improperly allowed to see activated linked accounts and connect new carts to the account. I discovered a Vulnerability that allows the user who has member privileges to connect new carts to the Taxjar account , like...
An Attack on Albanian Government Suggests New Iranian Aggression
A Tehran-linked hack of a NATO member marks a significant escalation against the backdrop of US-Iran nuclear talks...
GO-2022-0475 Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
The go command may execute arbitrary code at build time when cgo is in use. This may occur when running go get on a malicious package, or any other command that builds untrusted code. This can be caused by malicious unquoted symbol name in a linked object file...
CVE-2022-2243
An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows authenticated users to enumerate issues in non-linked sentry projects...
CVE-2022-2243
An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows authenticated users to enumerate issues in non-linked sentry projects...
CVE-2022-2243
Removed by vendor...
PT-2022-15427 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 14.8 through 14.10.4 GitLab EE/CE versions 15.0 through 15.0.3 GitLab EE/CE versions 15.1 through 15.1.0 Description: An access control issue affects GitLab EE/CE, allowing authenticated users to enumerate issues in...
CVE-2022-2243: Authorization Bypass Through User-Controlled Key
An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows authenticated users to enumerate issues in non-linked sentry projects...
Malicious code in spotify-linkedlist (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ccc278f4b02eefacc3f59ffb56eb2c71691ad66975e7469e16e52eb9b021ac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in resolve-linked (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36a50ec7a5671b4c6a2183d6844d7e68453b7021417ea7262cce2f0b503fa0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5766 Malicious code in resolve-linked (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36a50ec7a5671b4c6a2183d6844d7e68453b7021417ea7262cce2f0b503fa0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
China-linked APT Flew Under Radar for Decade
Researchers have identified a small yet potent China-linked APT that has flown under the radar for nearly a decade running campaigns against government, education and telecommunication organizations in Southeast Asia and Australia. Researchers from SentinelLabs said the APT, which they dubbed Aoq...