4332 matches found
SonicWall NSv Next-Gen Virtual Firewall SSL VPN
Binary data sonicwallnsvsslvpnwebdetect.nbin...
DEBIAN-CVE-2022-27940
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getipv6next in common/get.c...
PT-2022-36874
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the grk::PacketIter::next pcrl function, which is called ...
CVE-2022-0433
A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1...
UBUNTU-CVE-2022-0433
A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1...
Linux kernel 代码问题漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. BPF in versions prior to Linux kernel 5.17-rc1 has a denial-of-service vulnerability that stems from the mapgetnextkey function forcing dereference of NULL pointer on the Linux kernel, which can be...
CVE-2022-25465
Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling...
WordPress WooCommerce Next Order Coupon plugin <= 0.4.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Next Order Coupon plugin versions = 0.4.0. Solution No patched version available...
CVE-2022-23608
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions up to and including 2.11.1 when in a dialog set or forking scenario, a hash key shared by multiple UAC dialogs can...
123-x-ed-eied (>=1.0.5, <=1.0.6), @0soft/use-nextjs-page-loader (>=0.0.23-alpha.5, <=0.0.25) +854 more potentially affected by CVE-2022-23646 via next (>=10.0.0, <=12.0.10)
next NPM version =10.0.0, =1.0.5, =0.0.23-alpha.5, =0.0.1, =1.1.7, =0.1.0, =1.1.1, =0.0.25, =1.0.39, =0.0.0, =1.0.0, =1.6.1 and more Source cves: CVE-2022-23646 Source advisory: OSV:GHSA-FMVM-X8MV-47MJ...
Open Redirect
Overview github.com/gophish/gophish/controllers is a package middleware is responsible for the definition/implementation of middleware functionality. Affected versions of this package are vulnerable to Open Redirect. The Open Redirect vulnerability exists in the next query parameter. The...
Open Redirect
Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Open Redirect. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative...
ZEIT Next.js 安全漏洞
ZEIT Next.js is an open source web application framework from ZEIT based on Vue.js, Node.js, Webpack and Babel.js. A security vulnerability exists in ZEIT Next.js that stems from the product's UI not restricting the display of critical information. An attacker could cause information leakage by...
nextlevelmarketing.com.au Cross Site Scripting vulnerability OBB-2357357
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
123-x-ed-eied (>=1.0.5, <=1.0.6), @andrydharmawan/component-react (>=1.1.1, <=1.1.4) +111 more potentially affected by CVE-2022-21721 via next (>=12.0.0, <=12.0.8)
next NPM version =12.0.0, =1.0.5, =1.1.1, =0.0.41, =2.0.2, =2.0.1, =0.0.5, =1.9.6, =1.0.2, =0.0.0-34, =0.0.15, =1.1.0 and more Source cves: CVE-2022-21721 Source advisory: OSV:GHSA-WR66-VRWM-5G5X...
Denial of Service Vulnerability in next.js
Impact Vulnerable code could allow a bad actor to trigger a denial of service attack for anyone running a Next.js app at version = 12.0.0, and using i18n functionality. - Affected: All of the following must be true to be affected by this CVE - Next.js versions above v12.0.0 - Using next start or ...
GHSA-WR66-VRWM-5G5X Denial of Service Vulnerability in next.js
Impact Vulnerable code could allow a bad actor to trigger a denial of service attack for anyone running a Next.js app at version = 12.0.0, and using i18n functionality. - Affected: All of the following must be true to be affected by this CVE - Next.js versions above v12.0.0 - Using next start or ...
Code injection
Next.js is a React framework. Starting with version 12.0.0 and prior to version 12.0.9, vulnerable code could allow a bad actor to trigger a denial of service attack for anyone using i18n functionality. In order to be affected by this CVE, one must use next start or a custom server and the built-...
CVE-2022-21721
Next.js is a React framework. Starting with version 12.0.0 and prior to version 12.0.9, vulnerable code could allow a bad actor to trigger a denial of service attack for anyone using i18n functionality. In order to be affected by this CVE, one must use next start or a custom server and the built-...
CVE-2022-21721 DOS Vulnerability in next.js
Next.js is a React framework. Starting with version 12.0.0 and prior to version 12.0.9, vulnerable code could allow a bad actor to trigger a denial of service attack for anyone using i18n functionality. In order to be affected by this CVE, one must use next start or a custom server and the built-...