Atlassian Jira 安全漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is mainly used to track and manage various issues and defects in the workplace. A security vulnerability exists in Atlassian Jira Netic Group Export versions prior to 1.0.3 that stems from not performing...

CVE-2022-38059

Cross-Site Request Forgery CSRF vulnerability in Alexey Trofimov's Access Code Feeder plugin = 1.0.3 at WordPress...

WordPress plugin Alexey Trofimov s Access Code Feeder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Alexey...

Code injection

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 3354 and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code of password protected web elements...

CVE-2022-1368 Cognex 3D-A1000 Dimensioning System Missing Authentication for Critical Function

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 3354 and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized users to change the operator account password via webserver commands by monitoring web socket communications from an...

PT-2022-4702 · Cognex · Cognex 3D-A1000 Dimensioning System

Name of the Vulnerable Software and Affected Versions: Cognex 3D-A1000 Dimensioning System versions 1.0.3 3354 and prior Description: The issue is related to the implementation of security functions on the client-side of the Cognex 3D-A1000 Dimensioning System. This could allow a remote attacker ...

Cognex 3D-A1000 Dimensioning System 访问控制错误漏洞

The Cognex 3D-A1000 Dimensioning System is a compact industrial smart camera capable of capturing 3D and 2D moving objects from Cognex Corporation. An access control error vulnerability exists in Cognex 3D-A1000 Dimensioning System version 1.0.3 3354 and prior versions, which stems from a lack of...

CVE-2022-37781

fdkaac v1.0.3 was discovered to contain a heap buffer overflow via interceptormemcpy.part.46 at /sanitizercommon/sanitizercommoninterceptors.inc...

PT-2022-24071 · Fdkaac +3 · Fdkaac +3

Name of the Vulnerable Software and Affected Versions: fdkaac version 1.0.3 Description: A heap buffer overflow issue was discovered via interceptor memcpy.part.46 at /sanitizer common/sanitizer common interceptors.inc. Recommendations: For fdkaac version 1.0.3, at the moment, there is no...

Unicorn Engine 资源管理错误漏洞

Unicorn Engine is a software application. A lightweight, multi-platform, multi-architecture CPU simulator framework based on QEMU. A security vulnerability exists in Unicorn Engine version v1.0.3, which originates from reuse after release via a hook function...

WhiteSource CureKit 路径遍历漏洞

WhiteSource CureKit is a security library for WhiteSource Cure self-healing products from WhiteSource Japan. A security vulnerability exists in WhiteSource CureKit versions 1.0.1 through 1.0.3, which stems from isFileOutsideDir failing to properly clean up user input that could result in path...

CVE-2021-22571

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above...

Design/Logic Flaw

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above...

WordPress Pixel & tracking codes for Google Web stories (formerly AMP Stories) plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pixel & tracking codes for Google Web stories formerly AMP Stories plugin versions = 1.0.2. Solution Update the WordPress Pixel & tracking codes for Google Web stories formerly AMP Stories plugin to th...

WordPress Quote Requests for WooCommerce plugin < 1.0.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Quote Requests for WooCommerce plugin versions 1.0.3. Solution Update the WordPress Quote Requests for WooCommerce plugin to the latest available version at least 1.0.3...

Victure WR1200信任管理问题漏洞

Victure WR1200 is a router. Victure WR1200 1.0.3 and prior versions are vulnerable to trust management issues, which can be exploited by attackers to gain control of the device via SSH...

Victure WR1200 信任管理问题漏洞

The Victure WR1200 is a router. A trust management issue vulnerability exists in the Victure WR1200 that stems from the product sending the default Wifi Wpa2 key to anyone within Wi-Fi range. The following products and versions are affected: Victure WR1200 version 1.0.3...

WordPress Check & Log Email plugin <= 1.0.3 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by JrXnm in WordPress Check & Log Email plugin versions = 1.0.3. Solution Update the WordPress Check & Log Email plugin to the latest available version at least 1.0.4...

VulnCheck KEV: CVE-2020-15251

In the Channelmgnt plug-in for Sopel a Python IRC bot before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with MirahezeBot-Plugins with versions from 9.0.0 and less than 9.0.2 affected. Version 9.0.2...

GHSA-35QP-XQ9F-2RJX Improper Privilege Management in HashiCorp Nomad

HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task drivers can access processes associated with other tasks on the same node. Fixed in 0.12.10, and 1.0.3...