7383 matches found
PT-2022-15366 · Ibm · Ibm Sterling Partner Engagement Manager
Name of the Vulnerable Software and Affected Versions: IBM Sterling Partner Engagement Manager version 6.2.0 Description: The issue allows a malicious user to elevate their privileges and perform unintended operations on another user's data. Recommendations: For IBM Sterling Partner Engagement...
Input validation
IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or possibly change some information due to improper validiation of JWT tokens...
ROS-20220329-02
Vulnerability in the Moodle course management system, related to insufficient cleansing of user data in the Badges criteria code. Exploitation of the vulnerability could allow an attacker acting remotely, send a specially crafted query to the affected application and execute arbitrary SQL command...
Maccms Cross-Site Scripting Vulnerability (CNVD-2022-30791)
Maccms is a PHP-based film and television content management system CMS. v10 version of Maccms is vulnerable to a cross-site scripting vulnerability, which originates from the lack of a repeat parameter in /admin.php/admin/vod/data.html to check the data provided by the user and the output data...
KOYO Screen Creator 安全漏洞
Koyo Electronics Industries KOYO Screen Creator is a drawing program from Koyo Electronics Industries, Japan. A security vulnerability exists in KOYO Screen Creator version 0.1.1.1, which originates from a failure to properly validate the length of user-supplied data. An attacker could exploit th...
ImpressCMS SQL Injection Vulnerability (CNVD-2022-30802)
ImpressCMS is a MySQL-based, modular content management system CMS. The system includes modules for press releases, forums, and photo albums. ImpressCMS is vulnerable to a SQL injection vulnerability that stems from insufficient cleaning of user data passed in the groupps parameter of the...
ImpressCMS 授权问题漏洞
ImpressCMS is a MySQL-based, modular content management system CMS. The system includes modules for press releases, forums, and photo albums. ImpressCMS is vulnerable to an access control error that could be exploited by remote attackers to bypass implemented security restrictions and obtain...
CVE-2022-22653
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4. A malicious website may be able to access information about the user and their devices...
CVE-2022-22650
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data...
CVE-2022-22650
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data...
Design/Logic Flaw
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data...
CVE-2022-22650
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data...
CVE-2022-22650
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data...
CVE-2022-22650
CVE-2022-22650 affects macOS, where a plug-in may inherit the host application's permissions and access user data. The issue is addressed by fixes in macOS Big Sur 11.6.5, macOS Monterey 12.3, and Security Update 2022-003 Catalina; it is resolved by the improved checks. No exploitation details ar...
CVE-2022-24637
Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '...
Open Web Analytics Server 安全漏洞
Open Web Analytics Server is an open source alternative for commercial web analytics tools such as Google Analytics. A security vulnerability exists in Open Web Analytics version 1.7.4, which stems from the use of php-generated files instead of the expected php sequences that are not processed by...
The vulnerability of Visual Studio Code’s source editor, which stems from improper handling of user data, allows attackers to perform spoofing attacks.
The vulnerability of Visual Studio Code’s source editor exists due to incorrect processing of user data. Exploiting this vulnerability allows a malicious actor to perform a spoofing attack remotely...
PT-2022-16769
Name of the Vulnerable Software and Affected Versions Open Web Analytics versions prior to 1.7.4 Description The issue allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files...