CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

D-Link DIR-859 操作系统命令注入漏洞

D-Link DIR-859 is a wireless router from D-Link China.A security vulnerability exists in the D-Link DIR-859A1 1.05, which was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function. No detailed vulnerability details are currently available...

Ghost Foundation Ghost Post Creation insecure default installation vulnerability

Talos Vulnerability Report TALOS-2022-1686 Ghost Foundation Ghost Post Creation insecure default installation vulnerability January 19, 2023 CVE Number CVE-2022-47197,CVE-2022-47195,CVE-2022-47194,CVE-2022-47196 SUMMARY An insecure default vulnerability exists in the Post Creation functionality o...

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

Atlassian Bitbucket < 7.6.19 / 7.17.12 / 7.21.6 / 8.0.5 / 8.1.5 / 8.2.4 / 8.3.3 / 8.4.2 Command Injection

The version of Atlassian Bitbucket installed on the remote host 7.0.0 prior to 7.6.19, 7.7.0 prior to 7.17.12, 7.18.0 prior to 7.21.6, 8.0 prior to 8.0.5, 8.1 prior to 8.1.5, 8.2 prior to 8.2.4, 8.3 prior to 8.3.3 or 8.4 prior to 8.4.2. It is, therefore, affected by a command injection...

CVE-2022-46475

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

Stack overflow

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

CVE-2022-4883

A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH...

libXpm 代码问题漏洞

libXpm is a lib open source image file format library. A code issue vulnerability exists in libXpm. An attacker could exploit this vulnerability to execute other programs by manipulating the PATH environment variable...

CVE-2022-46475

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : libXpm vulnerabilities (USN-5807-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5807-1 advisory. Martin Ettl discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening...

Use reentrancyGuard for safeTransferFrom

Lines of code Vulnerability details Impact A reentrancy guard is a mechanism used to prevent reentrant calls in smart contracts, which can be a security vulnerability. Reentrancy can happen when a malicious contract calls the "safeTransferFrom" function and then calls it again before the first ca...

01ACP 跨站脚本漏洞

01ACP is a central administration area for all modules of 01-Scripts.de by Michael Individual Developer. A cross-site scripting vulnerability exists in 01ACP 01-Artikelsystem, which originates from an unknown function in the file 01article.php. Manipulation of the parameter $SERVER PHPSELF result...

EulerOS Virtualization 3.0.2.6 : vim (EulerOS-SA-2023-1053)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778, CVE-2021-3872, CVE-2021-3927, CVE-2021-3984, CVE-2021-4019,...

CVE-2022-47544

An issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is insufficiently sandboxed...

Denial Of Service (DoS)

newsboat is vulnerable to denial of service DoS attacks. Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires the user to set any environment variable in a different thread than the affected functions. The affected functions are...

Prototype Pollution

json-pointer is vulnerable to prototype pollution. The vulnerability exists in the set function of index.js, due to the improper checks for the tok variable which allows an attacker to modify object prototype attributes...

CVE-2022-47544

An issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is insufficiently sandboxed...

CVE-2022-47544

An issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is insufficiently sandboxed...

PT-2023-15394 · Unknown · Siren Investigate

Name of the Vulnerable Software and Affected Versions: Siren Investigate versions prior to 12.1.7 Description: An issue was discovered in Siren Investigate where script variable whitelisting is insufficiently sandboxed. Recommendations: For versions prior to 12.1.7, update to version 12.1.7 or...