11558 matches found
habitica 输入验证错误漏洞
habitica is an open-source habit-forming program open-sourced by HabitRPG USA. An input validation error vulnerability exists in habitica versions v4.119.0 through v4.232.2. An attacker exploits this vulnerability to open redirects via the login page...
Directus 代码问题漏洞
Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A code issue vulnerability exists in Directus versions v9.0.0-beta.2 through 9.6.0, which stems from a server-side request forgery SSRF vulnerability in the media upload feature. An attacker could us...
Recipes 跨站脚本漏洞
Recipes are apps for managing recipes, planning meals, creating shopping lists, and more. A cross-site scripting vulnerability exists in Recipes versions 0.17.0 through 1.2.5, which stems from the vulnerability to stored cross-site scripting XSS in the "Name" field of the Keywords, Foods, and Uni...
Malicious code in dependency-with-range (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e27b581993c977a4ff51fbafd4bfe0947f0f11e6ad971af17b9dd93fa16da97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in range-export (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b87e0eaef734e8f48ec3ef78b1404dcf4119124df9a8ac563e13abc11d267a03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in range-for-chrome (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98b3f0dedf22447b136933cebd9260009981f8b304810b5920783f44d84dad0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5588 Malicious code in range-export (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b87e0eaef734e8f48ec3ef78b1404dcf4119124df9a8ac563e13abc11d267a03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5589 Malicious code in range-for-chrome (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98b3f0dedf22447b136933cebd9260009981f8b304810b5920783f44d84dad0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tiny-range-binarysearch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1758f192df4854a2d7a5d26e16947cada8a23b6fad83735982f1207b13752357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6583 Malicious code in tiny-range-binarysearch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1758f192df4854a2d7a5d26e16947cada8a23b6fad83735982f1207b13752357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-23071
In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery SSRF, in the “Import Recipe” functionality. When an attacker enters the localhost URL, a low privileged attacker can access/read the internal file system to access sensitive information...
a2 (>=0.2.0, <=0.3.6), abc (>=0.1.0, <=0.2.3) +502 more potentially affected by unknown CVE via crossbeam (>=0.1.6, <=0.6.0)
crossbeam CARGO version =0.1.6, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.2.0, =0.11.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.7.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8GJ8-HV75-GP94...
CVE-2022-30325
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks is the same for every router except for the last four digits. The device default pre-shared key for both 2.4 GHz and 5 GHz networks can be guessed or brute-forced by an attacker...
DEBIAN-CVE-2022-32545
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior...
DEBIAN-CVE-2022-32546
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior...
Input validation
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1856)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Imagemagick Studio ImageMagick 输入验证错误漏洞
Imagemagick Studio ImageMagick is a suite of open-source image processing software from the American company Imagemagick Studio. The software can read, convert, or write images in a variety of formats. A security vulnerability exists in Imagemagick Studio ImageMagick that originates when handling...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1880)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...