CVE-2022-44069

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via the Nest library module...

PT-2022-27096 · Nest +1 · Nest +1

Name of the Vulnerable Software and Affected Versions: Zenario CMS version 9.3.57186 Description: The issue is related to Cross Site Scripting XSS via the Nest library module. Recommendations: For Zenario CMS version 9.3.57186, consider disabling the Nest library module as a temporary workaround...

CVE-2022-44069

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via the Nest library module...

Zenario CMS 跨站脚本漏洞

Zenario CMS is a Zenario open source application . Provides a Web-based content management system . A cross-site scripting vulnerability exists in Zenario CMS version 9.3.57186, which can be exploited by attackers to conduct cross-site scripting XSS attacks via the Nest library module...

CVE-2022-44069

CVE-2022-44069 affects Zenario CMS 9.3.57186, with XSS via the Nest library module. The root cause is likely improper handling of input within the Nest module, enabling cross-site scripting. Impact: Low in confidentiality and integrity, with user interaction required; no Availability impact docum...

mariadb: Crash executing query with VIEW, aggregate and subquery

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

Mageia: Security Advisory (MGASA-2022-0323)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mariadb: Crash executing query with VIEW, aggregate and subquery

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

mariadb: Crash executing query with VIEW, aggregate and subquery

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

mariadb: Crash executing query with VIEW, aggregate and subquery

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

Vendure Cross-Site Scripting Vulnerability

Vendure is a headless GraphQL eCommerce framework based on Node.js and Nest ＆ TypeScript, focused on developer productivity and easy customization. version 0.1.0-alpha.2 to 1.5.1 of Vendure is vulnerable to a cross-site scripting vulnerability that stems from the program's lack of data validation...

OESA-2022-1587 mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs a...

The vulnerability of the SELECT_LEX::nest_level component of the MariaDB database management system allows a attacker to cause a service failure.

The vulnerability of the SELECTLEX::nestlevel component of the MariaDB database management system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2021-46659

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

AZL-8454 CVE-2021-46659 affecting package mariadb for versions less than 10.6.7-1

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

DEBIAN-CVE-2021-46659

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

UBUNTU-CVE-2021-46659

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

MariaDB 安全漏洞

MariaDB is a free and open source database management system from the MariaDB Mariadb Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in versions of MariaDB prior to 10.7.2 that stems from its inability to recognize that SELECTLEX::nestlevel...

Google Fixes Mysterious Audio Recording Blip in Smart Speakers

After Google Home users started receiving mysterious alerts when their fire alarms went off or their plates smashed in their homes, Google acknowledged that it accidentally rolled out a feature causing the smart devices to record sounds without the voice prompt. Reports of the privacy faux pas...

A week in security (January 20 – 26)

Last week on Malwarebytes Labs, we reported on a Ryuk ransomware attack on The Tampa Bay Times, a newspaper in Florida; unmasked an elaborate browser locking scheme behind the more advanced tech support operations that are currently active; and looked at the latest laws on regulating deepfakes...