155 matches found
SUSE CVE-2022-21949
A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privileges on OBS. This issue...
PT-2023-33981 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue concerns a problem with reserved cluster accounting in the es remove extent function. The actual impact and potential for attack have not been proven yet. Recommendations: For Lin...
Mozilla Firefox 缓冲区错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in previous versions of Mozilla Firefox 107, which stems from the inclusion of a memory security error that can be exploited by an attacker to run arbitrary code...
PT-2022-9015 · Unknown +2 · Multimon-Ng +2
Name of the Vulnerable Software and Affected Versions: multimon-ng versions prior to 1.2.0 Description: A critical issue affects the function add ch of the file demod flex.c. The manipulation of the argument ch leads to a format string issue. Recommendations: For versions prior to 1.2.0, upgrade ...
OpenEMR 代码问题漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A code issue vulnerability exists in versions prior to OpenEMR 7.0.0.2 that stems...
Tasmota 缓冲区错误漏洞
Tasmota is a replacement firmware for the ESP8266 with easy configuration using the webUI, OTA updates, automation using timers or rules, scalability, and full local control over MQTT, HTTP, serial or KNX. A security vulnerability exists in previous versions of Tasmota commit number:...
PT-2022-35191 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.1 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It was introduced in version v2.6.21 and fixed in version v6.0.1. The actual impact and attack plausibility hav...
PT-2022-1317 · Intel · Qatzip
Name of the Vulnerable Software and Affected Versions: QATzip software maintained by IntelR versions prior to 1.0.9 Description: The issue is related to improper access control in QATzip software, which may allow an authenticated user to potentially enable escalation of privilege via local access...
Rdiffweb 跨站请求伪造漏洞
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A cross-site request forgery vulnerability exists in Rdiffweb versions prior to 2.4.5. An attacker could exploit this vulnerability t...
PT-2022-18869 · Nameless · Nameless
Name of the Vulnerable Software and Affected Versions: namelessmc/nameless versions prior to 2.0.2 Description: The issue concerns a session fixation problem. Recommendations: For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue...
mprweb 信息泄露漏洞
mprweb is a makedeb package repository MPR hosting platform open-sourced by makedeb. An information disclosure vulnerability exists in previous versions of mprweb d13e3f2f5a9c0b0f6782f35d837090732026ad77, which stems from an email address that is not hidden...
Samsung Members 安全漏洞
Samsung Members is a community platform app from Samsung, a South Korean company. a code issue vulnerability exists in versions prior to Samsung Members 4.2.005. The vulnerability stems from the fact that dynamic receivers in Samsung Members are not properly protected and can be exploited by...
Google TensorFlow资源管理错误漏洞
Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A resource management error vulnerability exists in Google TensorFlow versions prior to 2.9.0, prior to 2.8.1, prior to 2.7.2, and prior to 2.6.4, which stems from the fact that tf.ragged.consta...
TRENDnet TI-PG1284i Integer Underflow Vulnerability
The TRENDnet TI-PG Series is a series of switches from TRENDnet. A security vulnerability exists in TRENDnet TI-PG1284i versions prior to 2.0.2.S0, no details of the vulnerability are provided at this time...
PT-2022-20047 · Agoo · Agoo
Name of the Vulnerable Software and Affected Versions: Agoo versions prior to 2.14.3 Description: The issue arises when Agoo does not reject GraphQL fragment spreads that form cycles, which can lead to an application crash. It has been disputed by the vendor, who claims it is not the server's...
PT-2022-13752 · Libde265 +3 · Libde265 +3
Name of the Vulnerable Software and Affected Versions: libde265 versions prior to 1.0.11 Description: A Heap-based Buffer Overflow issue has been identified in the libde265 library. The issue is related to a buffer overflow, which can be exploited. The fix for this issue is established in a...
PT-2022-6761 · Jszip +1 · Jszip +1
Name of the Vulnerable Software and Affected Versions: JSZip versions prior to 3.8.0 Description: The issue is related to the loadAsync function in JSZip, which allows directory traversal via a crafted ZIP archive. This can be exploited by a remote attacker to write arbitrary files and execute...
PT-2022-16856 · Stripe · Stripe Cli
Name of the Vulnerable Software and Affected Versions: Stripe CLI versions prior to 1.7.13 Description: A vulnerability exists in Stripe CLI on Windows when certain commands are run in a directory where an attacker has planted files. The affected commands are stripe login, stripe config -e, strip...
CVE-2022-23437
There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present withi...
