8125 matches found
CVE-2021-42597
A Cross Site Scripting XSS vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14, SURMS V 1.0 via the Add New Tenant List Rent List form...
CVE-2021-42597
A Cross Site Scripting XSS vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14, SURMS V 1.0 via the Add New Tenant List Rent List form...
PT-2022-33625 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.1 Description: The issue concerns a counter restart during overflow for RV32 in RISC-V. It was introduced in version v5.18 and fixed in version v5.19.2. The actual impact and attack plausibility have...
PT-2022-33281 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v5.19.5 Description: The issue is related to missing prototypes in the RISC-V traps. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.14...
PT-2022-33690 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: The issue is related to missing prototypes in the RISC-V traps. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
RLSA-2022:6460 Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Incomplete cleanup of multi-core shared buffers aka SBDR CVE-2022-21123 Incomplete cleanup of microarchitectural fill buffers aka SBDS CVE-2022-21125 Incomplete cleanup in specific special regist...
Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Incomplete cleanup of multi-core shared buffers aka SBDR CVE-2022-21123 Incomplete cleanup of microarchitectural fill buffers aka SBDS CVE-2022-21125 Incomplete cleanup in specific special regist...
RISC-V 代码问题漏洞
RISC-V is an open source instruction set architecture based on the principle of reduced instruction sets, which is easily interpreted as a type of "open source hardware" corresponding to the open source software movement. A security vulnerability exists in the RISC-V kernel that stems from a NULL...
RISC-V 资源管理错误漏洞
RISC-V is an open source instruction set architecture based on the principle of reduced instruction sets, which is easily interpreted as a type of "open source hardware" corresponding to the open source software movement. A security vulnerability exists in the RISC-V kernel, stemming from a...
RISC-V 输入验证错误漏洞
RISC-V is an open source instruction set architecture based on the principle of reduced instruction sets, which is easily interpreted as a form of "open source hardware" corresponding to the open source software movement. The RISC-V kernel suffers from an Input Validation Error vulnerability, whi...
Cross-site Scripting (XSS)
getkirby/cms is vulnerable to Cross-site Scripting XSS. The use of the v-html tag in MultiselectInput.vue allows an attacker to inject and execute malicious javascript through the dynamic options in the multi-select field...
Ubuntu: Security Advisory (USN-1719-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the Windows Hyper-V hardware virtualization system allows attackers to escalate their privileges.
The vulnerability of the Windows Hyper-V hardware virtualization system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...
Project-nexus SQL注入漏洞
Project-nexus is a generalized blog site by the individual developer Vineeth B V in India. Project-nexus suffers from an SQL injection vulnerability that stems from its insensitivity to user input...
Remote Support Authentication Vulnerability in IBM Spectrum Virtualize and Lenovo Storage V Series - Lenovo Support US
No description provided...
Security Bulletin: Vulnerabilities in vCenter affect IBM Cloud Pak System (CVE-2021-21980, CVE-2021-22049 )
Summary Vulnerabilities have beein found in VMware vCenter. vCenter is shipped with Cloud Pak System. Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2021-21980 DESCRIPTION: VMware vCenter Server could allow a remote attacker to obtain sensitive information,...
The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code or gain unauthorized access to the device.
The vulnerability of the Windows Hyper-V hardware virtualization system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code or gain unauthorized access to the device...
CVE-2022-2242
CVE-2022-2242 affects KUKA SystemSoftware V/KSS versions prior to 8.6.5. The underlying issue is improper access control, allowing an unauthorized attacker to directly read and write robot configurations when access control is not available or not enabled (default). The connected documents confir...
CVE-2022-2242 KUKA V/KSS WoV SH access control vulnerability
The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled default...