2879 matches found
PT-2023-15466 · Last Yard · Last Yard
Name of the Vulnerable Software and Affected Versions: Last Yard version 22.09.8-1 Description: The issue is related to the lack of enforcement of HSTS headers. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue...
CVE-2022-30421
Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive information to be obtained vialocal password authentication module...
CVE-2023-0581
The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it...
PT-2023-14812 · Unknown · Phpgurukul Doctor Appointment Management System
Name of the Vulnerable Software and Affected Versions: phpgurukul Doctor Appointment Management System version 1.0.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the searchdata variable. Recommendations: For phpgurukul Doctor Appointment...
CVE-2023-0410 Cross-site Scripting (XSS) - Generic in builderio/qwik
Cross-site Scripting XSS - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5...
CVE-2022-43455 CVE-2022-43455
Sewio’s Real-Time Location System RTLS Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to the servicestart, servicestop, and servicerestart modules of the software. This could allow an attacker to start, stop, or restart arbitrary...
PT-2023-34370 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.13 through 5.10.162 Description: A memory leak issue was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 4.13 through 5.10.162, update to versi...
PT-2023-34073 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to avoiding integer overflow in the ethtool phys id function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
CVE-2022-38492
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. One parameter allows SQL injection. Version 2022.1.110.1.02 fixes the vulnerability...
Sql injection
Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...
PT-2023-14806 · Tenda · Tenda Ax12
Name of the Vulnerable Software and Affected Versions: Tenda AX12 version 22.03.01.21 Description: The issue is related to an unauthorized buffer overflow, which can lead to the web service failing to restart or potentially execute arbitrary code. Recommendations: For Tenda AX12 version...
PT-2022-8368 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...
PT-2022-24555 · Micro Focus · Micro Focus Zenworks
Name of the Vulnerable Software and Affected Versions: Micro Focus ZENworks versions 2020 Update 3a and prior Description: A vulnerability has been identified that allows administrators with rights to perform actions, such as installing a bundle, on a set of managed devices, to exercise these...
Remote code execution
If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...
CVE-2022-34481
In the nsTArrayImpl::ReplaceElementsAt function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...
PT-2022-27416 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a candidate number that...
CVE-2022-1197
When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept as non-revoked. Revocation statements that used another revocation reason, or that didn't specify a...
OPENSUSE-SU-2022:10244-1 Security update for chromium
This update for chromium fixes the following issues: Update to version 108.0.5359.124 boo1206403: - CVE-2022-4436: Use after free in Blink Media - CVE-2022-4437: Use after free in Mojo IPC - CVE-2022-4438: Use after free in Blink Frames - CVE-2022-4439: Use after free in Aura - CVE-2022-4440: Use...
PT-2022-27447 · Dragino · Dragino Lora Lg01
Name of the Vulnerable Software and Affected Versions: Dragino Lora LG01 18ed40 IoT version 4.3.4 Description: A Cross-Site Request Forgery issue was discovered in the logout page of the affected software. Recommendations: For Dragino Lora LG01 18ed40 IoT version 4.3.4, consider disabling the...