3842 matches found
CVE-2022-1435 WPCargo Track & Trace < 6.9.5 - Admin+ Stored Cross Site Scripting
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
CVE-2022-1435
CVE-2022-1435 affects the WordPress WPCargo Track & Trace plugin prior to 6.9.5. The vulnerability arises from insufficient sanitization/escaping of certain plugin settings, which could allow an authenticated high-privilege user (e.g., admin) to perform Cross-Site Scripting (XSS) attacks even whe...
CVE-2022-22325
IBM MQ IBM MQ for HPE NonStop 8.1.0 can inadvertently disclose sensitive information under certain circumstances to a local user from a stack trace. IBM X-Force ID: 218853...
Information disclosure
IBM MQ IBM MQ for HPE NonStop 8.1.0 can inadvertently disclose sensitive information under certain circumstances to a local user from a stack trace. IBM X-Force ID: 218853...
CVE-2022-22325
IBM MQ IBM MQ for HPE NonStop 8.1.0 can inadvertently disclose sensitive information under certain circumstances to a local user from a stack trace. IBM X-Force ID: 218853...
IBM MQ for HPE NonStop 信息泄露漏洞
IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. An information disclosure vulnerability exists in IBM MQ for HPE NonStop version 8.1.0, which can be exploited b...
Trend Micro Maximum Security 后置链接漏洞
Trend Micro Maximum Security is a set of computer security protection software from Trend Micro. The software includes virus detection, malware protection, and authentication protection. Trend Micro Maximum Security suffers from a back-link vulnerability that originates from an insecure link trac...
PT-2022-15363 · Ibm · Ibm Mq
Name of the Vulnerable Software and Affected Versions: IBM MQ for HPE NonStop version 8.1.0 Description: The issue can inadvertently disclose sensitive information under certain circumstances to a local user from a stack trace. Recommendations: For IBM MQ for HPE NonStop version 8.1.0, at the...
Security Bulletin: IBM MQ for HP NonStop Server is affected by vulnerability CVE-2022-22325
Summary A queue manager trace may disclose a plaintext password flowing over an MQ channel. The issue is described by CVE-2022-22325 Vulnerability Details CVEID: CVE-2022-22325 DESCRIPTION: IBM MQ can inadvertently disclose sensitive information under certain circumstances to a local user from a...
CVE-2022-22325
IBM MQ IBM MQ for HPE NonStop 8.1.0 can inadvertently disclose sensitive information under certain circumstances to a local user from a stack trace. IBM X-Force ID: 218853...
CVE-2022-1124
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled...
Authorization
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled...
CVE-2022-1124
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled...
CVE-2022-1124
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled...
CVE-2022-1124
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled...
CVE-2022-1124
Removed by vendor...
PT-2022-13673 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 14.8.6 GitLab CE/EE versions 14.9.0 through 14.9.4 GitLab CE/EE version 14.10.0 Description: An improper authorization issue has been discovered, allowing Guest project members to access the trace log of jobs wh...
kernel: perf trace: Really free the evsel->priv area
A memory leak flaw was found in the Linux kernel's perf trace tool in the event selector cleanup logic. A local user can trigger this issue by running perf trace commands, causing the tool to free memory based on an incorrect condition check that inverts the intended logic for non-syscall...
