13092 matches found
GHSA-J545-FRH3-R9GQ SQL Injection in dolibarr
dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...
SQL Injection in dolibarr
dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...
pimcore is vulnerable to SQL Injection
pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...
CVE-2021-46311
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfsgdestroyroutes at scenegraph/vrmlroute.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46237
An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfnodeunregister at scenegraph/basescenegraph.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46240
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfdumpvrmlsffield at scenemanager/scenedump.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46242
HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5ACunpinentry...
HTML Injection
microweber/microweber is vulnerable to HTML injection. An attacker can inject and execute malicious html content in the webpage as the library does not properly clean the html tags before being rendered on the webpage...
Access Control Bypass
microweber/microweber is vulnerable to access control bypass. The vulnerability that exists in user permissions in apiuser.php file does not perform sufficient user permissions, allowing unauthorized users to access sensitive information...
CVE-2022-0319 Out-of-bounds Read in vim/vim
Out-of-bounds Read in vim/vim prior to 8.2...
CVE-2022-22891
Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecmarefobjectinline in /jerry-core/ecma/base/ecma-gc.c...
SUSE-SU-2022:0091-2 Security update for apache2
This update for apache2 fixes the following issues: Apache2 was updated to the current stable version 2.4.51 jscSLE-22733 jscSLE-22849 It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51. See https://downloads.apache.org/httpd/CHANGES2.4 for a complete chang...
Remote Code Execution (RCE)
libspf2 is vulnerable to remote code execution. The vulnerability exists in SPFrecordexpanddata in spfexpand.c, allowing an attacker to send a malicious SPF DNS record to cause overflow data...
Remote Code Execution (RCE)
libspf2 is vulnerable to remote code execution. The vulnerability exists due to a heap-based buffer overflow that allowing an attacker to inject maliciously crafted script into the system...
CVE-2022-21699 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2022-21351 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2022-21357 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2022-21352 vulnerabilities
Vulnerabilities for packages: mysql...