7334 matches found
GHSA-6J88-6WHG-X687 Cross-site Scripting in Apache Tomcat
In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...
KGExplore 安全漏洞
KGExplore is a publicly available knowledge graph exploration project for individual developers. A security vulnerability exists in the KGExplore package for PyPI versions v0.1.1 through v0.1.2. An attacker exploited the vulnerability to access sensitive user information and digital currency keys...
drxhello 安全漏洞
drxhello is a pip package for individual developers. A security vulnerability exists in the PyPI v0.0.1 version of the drxhello package. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...
AAmiles 安全漏洞
AAmiles is a machine learning project scanner. AAmiles suffers from a security vulnerability. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...
AAmiles 安全漏洞
AAmiles is a machine learning project scanner. AAmiles suffers from a security vulnerability. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...
Beginner 安全漏洞
Beginner is a handy code package for Python beginners. A security vulnerability exists in Beginner. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...
Zibal 安全漏洞
Zibal is the Zibal payment gateway. A security vulnerability exists in Zibal. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...
Togglee 安全漏洞
Togglee is a simple library for separating feature deployment from release time. A security vulnerability exists in Togglee. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...
RootInteractive 安全漏洞
RootInteractive is an individual developer's code for interactively visualizing multidimensional data in ROOT or native Python format Panda, numpy. A security vulnerability exists in the RootInteractive package in PyPI versions v0.0.5 through v0.0.19b0. An attacker exploited the vulnerability to...
Sixfab 安全漏洞
Sixfab is a pip package for individual developers. A security vulnerability exists in the Sixfab-Tool package in PyPI versions v0.0.2 through v0.0.3. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...
Flaws in Smart Jacuzzi App Could Be Exploited To Extract Users’ Data
By Deeba Ahmed The vulnerability existed in Jacuzzi Brand LLC’s SmartTub app web interface that could reveal users private data to… This is a post from HackRead.com Read the original post: Flaws in Smart Jacuzzi App Could Be Exploited To Extract Users Data...
Recipes Cross-Site Scripting Vulnerability (CNVD-2022-58298)
Recipes are apps for managing recipes, planning meals, creating shopping lists, and more. A cross-site scripting vulnerability exists in Recipes versions 1.0.5 through 1.2.5, which stems from a filtered escape of user data missing from the name parameter. A low-privileged attacker can exploit thi...
Recipes Cross-Site Scripting Vulnerability (CNVD-2022-58299)
Recipes are apps for managing recipes, planning meals, creating shopping lists, and more. A cross-site scripting vulnerability exists in Recipes versions 1.0.5 through 1.2.5, which stems from a filtered escape of user data missing from the name parameter. A low-privileged attacker can exploit thi...
IBM Robotic Process Automation 信息泄露漏洞
IBM Robotic Process Automation is a robotic process automation product from IBM USA. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. IBM Robotic Process Automation suffers from an information disclosure vulnerability that stems from...
CVE-2022-30229
A vulnerability has been identified in SICAM GridEdge Classic All versions V2.6.6. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user's id is known...
CVE-2022-22103
Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto...
CVE-2022-22103
Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto...
Siemens SINEMA Remote Connect Server 日志信息泄露漏洞
SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunneled connections VPN between headquarters, service technicians and installed machines or plants. An information disclosure vulnerability exists in Siemens SINEMA Remote Connect Server, which stems from ...
Siemens SICAM GridEdge Essential 授权问题漏洞
SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.Siemens SICAM GridEdge is vulnerable to an authentication error, which stems from the fact that the affected software does not require authenticated access to privileged functions and can be exploit...
