693 matches found
UBUNTU-CVE-2022-0717
Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2...
CVE-2022-0665
Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2...
CVE-2021-44573
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3200 Reason: This candidate is a duplicate of CVE-2021-3200. Notes: All CVE users should reference CVE-2021-3200 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2022-0630
Out-of-bounds Read in Homebrew mruby prior to 3.2...
mruby 缓冲区错误漏洞
mruby is a lightweight implementation of the Ruby language. mruby 3.2 previously had a security vulnerability that stemmed from the use of out-of-range pointer offsets. No detailed vulnerability details are currently available...
CVE-2022-0570
Heap-based Buffer Overflow in Homebrew mruby prior to 3.2...
MOXA Moxa MXView 信任管理问题漏洞
MOXA Moxa MXView is a specialized software for managing networks from MOXA Taiwan, China. The software can be used to perform operations such as configuration processing for all devices within a network. Moxa MXView suffers from a trust management issue vulnerability that originates from an...
CVE-2022-0525
Out-of-bounds Read in Homebrew mruby prior to 3.2...
CVE-2022-0323
creationtimestamp| type| source ---|---|--- 2022-01-21 20:13:26+00:00| seen| https://t.me/cibsecurity/36043...
CVE-2022-0012
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system integrity or cause a denial of service condition. This issue impacts: Cortex XDR age...
CVE-2021-45588
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6...
CVE-2021-45578
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6...
PYSEC-2021-439
In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths...
PT-2021-24086 · Django +4 · Django +4
Name of the Vulnerable Software and Affected Versions: Django versions 2.2 before 2.2.25 Django versions 3.1 before 3.1.14 Django versions 3.2 before 3.2.10 Description: HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths. This issue has low...
CVE-2021-34408
The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user during the installation or update of the client. This could allow for potential privilege escalation if a link was created between the user writable...
PYSEC-2021-317
The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...
UBUNTU-CVE-2020-18976
Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'dochecksum' function in 'checksum.c'. It can be triggered by sending a crafted pcap file to the 'tcpreplay-edit' binary. This issue is different than CVE-2019-8381...
CVE-2021-23431
The package joplin before 2.3.2 are vulnerable to Cross-site Request Forgery CSRF due to missing CSRF checks in various forms...