2471 matches found
PT-2022-18973 · Reprise · Reprise License Manager
Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 14.2 Description: The issue is a reflected cross-site scripting vulnerability XSS in the "/goform/rlmswitchr process" file parameter via GET. Authentication is required to exploit this issue. Recommendations: F...
Sina Weibo Android SDK 安全漏洞
Sina Weibo Android SDK is a software development kit. A security vulnerability exists in Sina Weibo Android SDK version 4.2.7, which stems from a redirection issue where any unreported activity can be started by com.sina.weibo.sdk.share.WbShareTransActivity...
FreeLAN 代码问题漏洞
FreeLAN is a free, open source, multi-platform, peer-to-peer VPN software from Julien Kauffmann, an individual developer in Canada. A security vulnerability exists in FreeLAN 2.2, which stems from an unreferenced service path vulnerability through a carefully crafted file in the FreeLAN service...
PT-2022-10169 · Moxa · Moxa Nport Iaw5000A-I/O
Name of the Vulnerable Software and Affected Versions: Moxa NPort IAW5000A-I/O series firmware versions 2.2 or earlier Description: The issue is related to improper input validation in the built-in web server, which may allow a remote attacker to execute commands. Recommendations: For Moxa NPort...
PT-2022-16790 · Canon · Canon Imageclass Mf644Cdw
Name of the Vulnerable Software and Affected Versions: Canon imageCLASS MF644Cdw version 10.02 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...
CVE-2022-22316
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configured authorization checks. IBM X-Force ID: 218276...
Piwigo SQL注入漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo version 12.2.0, which stems from a SQL injection vulnerability in Piwigo version 12.2.0...
WordPress plugin MaxGalleria 跨站脚本漏洞
WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. WordPress plugin is a WordPress application plugin. WordPress MaxGalleria plugin version 6.2.5 contains a cross-site scripting vulnerability. An attacker can exploit the vulnerability to execute JavaScri...
SUSE-SU-2022:0886-1 Security update for libreoffice
This update for libreoffice fixes the following issues: Update to version 7.2.5.1 jscSLE-18214: - CVE-2021-25636: Fixed an incorrect vadidation of digitally signed documents bsc1196456...
AZL-9068 CVE-2021-20257 affecting package qemu for versions less than 6.2.0-2
An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits tx descriptors in processtxdesc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial o...
Android Enterprise: Allow cross file copy and paste policy not working as expected after Citrix Endpoint Management upgraded to 22.2.0 (or later).
Customers who's restriction policy setting "Allow cross file copy and paste" is not working as expected after Citrix Endpoint Management CEM upgraded to 22.2.0 or later release...
CVE-2022-23907
CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting XSS vulnerability via the parameter m1fmmessage...
PT-2022-16585 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.2.4 Description: The issue arises from some example DAGs in Apache Airflow not properly sanitizing user-provided params, making them susceptible to OS Command Injection from the web UI. Recommendations: For...
Wolfssl 信任管理问题漏洞
wolfSSL CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from wolfSSL, USA. A trust management issue vulnerability exists in wolfSSL versions prior to 5.2.0, which stems from the inability of TLS 1.3 servers to properly enforce mutual...
CVE-2022-0631
Heap-based Buffer Overflow in Homebrew mruby prior to 3.2...
mruby 安全漏洞
mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in mruby that stems from a heap-based buffer overflow in Homebrew mruby before 3.2...
mruby 缓冲区错误漏洞
mruby is a lightweight implementation of the Ruby language. mruby suffers from a buffer overflow vulnerability that stems from a read timeout in versions of mruby prior to 3.2. An attacker could exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...
CVE-2021-3813
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...