PT-2022-15815 · Erpnext · Erpnext

Name of the Vulnerable Software and Affected Versions: ERPNext versions v11.0.0-beta through v13.0.2 Description: The issue concerns missing authorization in the chat rooms functionality. A low-privileged attacker can send direct or group messages to any member or group, impersonating themselves ...

Malicious code in 13-pkg-1313 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2710d9c11ac4b066d45fecc52ccae29c4fb84f624e0142210a7b8e0a77da514 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 13-pkg-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d11ff8eabd16040bbd151481a728945ea4c50fe74433a661598e30c0d635d26c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scheduler-0-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28d131b97aab3988f77e132d75ebbf1c80b1d4f4f52f4aa6452dc94e064f8dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-20062

A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to...

PT-2022-14366 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a permissions bypass in the deletePackageX function of DeletePackageHelper.java, allowing a Guest user to reset pre-loaded applications for other users. This...

npm CLI 信息泄露漏洞

npm CLI is a package manager from the US company npm. An information disclosure vulnerability exists in the npm CLI npm-packlist version v7.9.0 and v7.13.0, which stems from a runtime omission of the root-level .gitignore and .npmignore file exclusion directives...

Malicious code in discord-js-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efa16d135ce14e2cecb4cc4203b19a8ea5dde2ad02b34a62403aa10036938d20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30745

Improper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to access internal files in Quick Share...

PT-2022-20449 · Sofia-Sip +4 · Sofia-Sip +4

Name of the Vulnerable Software and Affected Versions: Sofia-SIP versions prior to 1.13.8 Description: Sofia-SIP is an open-source Session Initiation Protocol SIP User-Agent library. An attacker can send a message with evil sdp to FreeSWITCH, which may cause a crash. This type of crash may be...

CVE-2022-26747

This issue was addressed with improved checks. This issue is fixed in Xcode 13.4. An app may be able to gain elevated privileges...

CVE-2022-27134

creationtimestamp| type| source ---|---|--- 2022-05-13 07:26:26+00:00| seen| https://t.me/cibsecurity/42574...

CVE-2021-0194

Improper access control in the IntelR In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access...

Intel In-Band Manageability 输入验证错误漏洞

Intel In-Band Manageability is a software from Intel Corporation USA. Helps manage a single device and uses extensions to allow control of multiple nodes through Intel Architecture hosts. An input validation error vulnerability exists in Intel In-Band Manageability versions prior to 2.13.0, which...

Contao 跨站脚本漏洞

Contao is an open source content management system CMS developed using PHP. The system supports search engines, rights management and CSS frameworks. A security vulnerability exists in Contao versions 4.13.0 through 4.13.3 and earlier, which allows untrusted users to inject malicious code into...

CVE-2022-28714

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, a DLL Hijacking vulnerability exists in...

SUSE Open Build Service 代码问题漏洞

Open Build Service OBS is a general-purpose system for building and distributing packages from source code in an automated, consistent, and repeatable manner organized by the Open Build Service. A code issue vulnerability exists in SUSE Open Build Service versions prior to 2.10.13 that could allo...

Bender ebee 充电控制器 安全漏洞

The ebee is a charge controller from Bender. A security vulnerability exists in the Bender ebee Charge Controller that stems from an unprotected data export. The backup export is protected by a random key. The key is set at user login. It is empty after a reboot. An attacker can exploit this...

DEBIAN-CVE-2022-29264

An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur...

UBUNTU-CVE-2022-24841

fleetdm/fleet is an open source device management, built on osquery. All versions of fleet making use of the teams feature are affected by this authorization bypass issue. Fleet instances without teams, or with teams but without restricted team accounts are not affected. In affected versions a te...