PT-2022-3032 · Ntfs-3G +9 · Ntfs-3G +9

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions through 2021.8.22 Description: The issue is related to a heap-based buffer overflow in the ntfs names full collate function of the NTFS-3G module for the NTFS file system. This can be exploited by using a specially crafted NT...

Plone Unauthorized Access Vulnerability

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5...

GHSA-QC57-H2F7-P4HX Plone Unauthorized Access Vulnerability

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5...

College Management System SQL注入漏洞

College Management System is a simple project. It is used to record students, teachers, subjects, schedules and all things related to the university. College Management System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to conduct SQL injection attack via...

CVE-2022-30047

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...

kernel: iommu/amd: Fix I/O page table memory leak

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix I/O page table memory leak The current logic updates the I/O page table mode for the domain before calling the logic to free memory used for the page table. This results in IOMMU page table memory leak, and can be...

DotNetNuke Vulnerable to XSS in Pass-Through Values

Cross-site scripting XSS vulnerability in the IFrame module before 03.02.01 for DotNetNuke DNN, caused by improper validation of user-supplied input by an unspecified script. Pass through values were not getting filtered, leaving them vulnerable to XSS. A remote attacker could exploit this...

GHSA-XR96-7CCP-PG5C DotNetNuke Vulnerable to XSS in Pass-Through Values

Cross-site scripting XSS vulnerability in the IFrame module before 03.02.01 for DotNetNuke DNN, caused by improper validation of user-supplied input by an unspecified script. Pass through values were not getting filtered, leaving them vulnerable to XSS. A remote attacker could exploit this...

PT-2022-16995 · Lexmark · Lexmark

Name of the Vulnerable Software and Affected Versions: Lexmark products through 2022-02-10 Description: The issue is related to Incorrect Access Control in Lexmark products. Recommendations: For Lexmark products through 2022-02-10, at the moment, there is no information about a newer version that...

CVE-2022-20730

A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This vulnerability is due to incorrect feed update processing. An attacker could exploit this...

CVE-2022-1385: Improper Control of a Resource Through its Lifetime

Mattermost 6.4.x and earlier fails to properly invalidate pending email invitations when the action is performed from the system console, which allows accidentally invited users to join the workspace and access information from the public teams and channels...

CVE-2022-23446: Undefined Security Weakness

A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole application unresponsive via changing its root directory access permission...

PT-2022-17729

Name of the Vulnerable Software and Affected Versions Barco Control Room Management through Suite 2.9 Build 0275 Description The issue allows attackers to access sensitive information and components through directory traversal. Requests must begin with the "GET /...." substring, enabling access t...

CVE-2021-45490

The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through 2022-03-17 lack SSL certificate validation...

PT-2022-13118 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 10.0 through 14.5.4 GitLab versions 10.1 through 14.6.4 GitLab versions 10.2 through 14.7.1 Description: An issue in GitLab allows private project paths to be disclosed to unauthorized users via system notes when an Issue is...

PT-2022-16479 · Fromsoftware · Dark Souls Iii

Name of the Vulnerable Software and Affected Versions: Dark Souls III versions through 2022-03-19 Description: The matchmaking servers allow remote attackers to send arbitrary push requests to clients via a "RequestSendMessageToPlayers" request. This issue is restricted on the client side and can...

Bandai Namco FromSoftware Dark Souls III 安全漏洞

Bandai Namco FromSoftware Dark Souls III is an action role-playing game by Japanese company FromSoftware. A security vulnerability in the matchmaking server of Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to send arbitrary push requests to clients via...

Yokogawa Electric 信任管理问题漏洞

Yokogawa Electric is a server of Yokogawa Electric Yokogawa, a Japanese company. A security vulnerability exists in Yokogawa Electric. The following products and versions are affected: CENTUM VP versions R5.01.00 through R5.04.20 and R6.01.00 through R6.08.00, Exaopc versions R3.72.00 through...

PT-2022-7364 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.16-rc6 Description: An issue was discovered in the Linux kernel, related to a lack of check after calling vzalloc and lack of free after allocation in drivers/media/test-drivers/vidtv/vidtv s302m.c. This issue ...

Code injection

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys. This vulnerability impacts Fireware OS before 12.7.2U2, 12.x before 12.1.3U8, and 12.2.x through 12.5.x before 12.5.9U2...