673 matches found
Qt 缓冲区错误漏洞
Qt is a cross-platform C++ application development framework from the Norwegian company Qt. It is widely used to develop GUI programs, in which case it is also known as the widget toolkit. It can also be used to develop non-GUI programs, such as console tools and servers. A security vulnerability...
GNU Mailman 安全漏洞
GNU Mailman is a free suite of software for managing e-mail discussions and e-mail lists from the GNU community in the United States. The software integrates with web projects to make it easy for users to manage email subscription accounts and provides built-in archiving, automatic forwarding...
SUSE-SU-2023:1837-1 Security update for apache2-mod_auth_openidc
This update for apache2-modauthopenidc fixes the following issues: - CVE-2022-23527: Fixed open redirect in oidcvalidateredirecturl using tab character bsc1206441. - CVE-2023-28625: Fixed NULL pointer dereference when OIDCStripCookies was set and a crafted Cookie header was supplied bsc1210073...
USN-5960-1 python2.7, python3.10, python3.5, python3.6, python3.8 vulnerability
Yebo Cao discovered that Python incorrectly handled certain URLs. An attacker could possibly use this issue to bypass blocklisting methods by supplying a URL that starts with blank characters...
SUSE CVE-2022-24765
Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...
Microsoft .NET Framework 安全漏洞
Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A security vulnerability...
CVE-2022-4473 Widget Shortcode <= 0.3.5 - Contributor+ Stored XSS
The Widget Shortcode WordPress plugin through 0.3.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...
CVE-2022-3568
creationtimestamp| type| source ---|---|--- 2023-02-10 16:57:50+00:00| seen| https://t.me/cibsecurity/57906...
January 19, 2023-KB5022479 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11
None None...
PT-2023-19046 · Microsoft +1 · Outlook +1
Name of the Vulnerable Software and Affected Versions: Axigen version 10.3.3.52 Description: A 2-Step Verification issue allows an attacker to access a mailbox by bypassing 2-Step Verification when trying to add an account to any third-party webmail service with IMAP or POP3 without any...
PT-2023-13945 · WordPress · Royal Elementor Addons
Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons WordPress plugin versions prior to 1.3.56 Description: The issue is related to the lack of authorization and CSRF checks when deleting a template, and it does not ensure that the post to be deleted is a template. Th...
Pilz PMC programming tool 授权问题漏洞
Pilz PMC programming tool is a PMC programming tool from Pilz. A security vulnerability exists in Pilz PMC programming tool versions 3.x through 3.5.17 and earlier, which originates from the fact that its user's password can be changed by an attacker without knowing the current password...
PT-2022-8323 · 3S Smart Software Solutions +1 · Codesys Development System +1
Name of the Vulnerable Software and Affected Versions: Pilz PMC programming tool versions 3.x through 3.5.16 Description: A security issue allows an attacker to change a user's password without knowing the current password. This is possible in the Pilz PMC programming tool, which is based on the...
PT-2022-23627 · Intel · Intel Nuc 10 Performance Mini Pcs +1
Name of the Vulnerable Software and Affected Versions: IntelR NUC 10 Performance Kits and IntelR NUC 10 Performance Mini PCs versions prior to FNCML357.0053 Description: The issue is related to improper access control in BIOS firmware, which may allow a privileged user to enable escalation of...
PT-2022-19894 · Inhand Networks · Inrouter302
Name of the Vulnerable Software and Affected Versions: InHand Networks InRouter302 version 3.5.45 Description: A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality. This allows an attacker to send a specially-crafted HTTP request, potentially leading to...
October 25, 2022-KB5018859 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11
None None...
October 25, 2022-KB5018857 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H1
None None...
CVE-2022-35711
creationtimestamp| type| source ---|---|--- 2022-10-15 00:29:16+00:00| seen| https://t.me/cibsecurity/51508...