Hyperledger Fabric 资源管理错误漏洞

Hyperledger Fabric is an enterprise licensed distributed ledger framework. It is used to develop solutions and applications. A security vulnerability exists in Hyperledger Fabric version 2.3 that stems from the fact that it allows an attacker to cause a denial of service by repeatedly sending a...

PT-2022-27260 · WordPress · Simple Video Embedder

Name of the Vulnerable Software and Affected Versions: Simple Video Embedder plugin versions prior to 2.3 Description: A Stored Cross-Site Scripting XSS issue exists, allowing attackers to inject malicious scripts. This can be exploited by contributors or those with higher access levels...

PT-2022-6310 · Ibm · Ibm Cloud Pak For Multicloud Management Monitoring

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Multicloud Management Monitoring versions 2.0 through 2.3 Description: The issue is related to incorrect restriction of a directory path with limited access. Exploitation of this issue may allow a remote attacker to elevate...

DEBIAN-CVE-2022-35020

Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component interceptormemcpy at /sanitizercommon/sanitizercommoninterceptors.inc...

AZL-43723 CVE-2022-35017 affecting package advancecomp 2.5-1

Advancecomp v2.3 was discovered to contain a heap buffer overflow...

PT-2022-22495 · Unknown +4 · Advancecomp +4

Name of the Vulnerable Software and Affected Versions: Advancecomp version 2.3 Description: A heap buffer overflow issue was discovered in Advancecomp. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this...

PT-2022-22497 · Unknown +4 · Advancecomp +4

Name of the Vulnerable Software and Affected Versions: Advancecomp version 2.3 Description: A segmentation fault was discovered in the software. The issue has been fixed in an update, which addresses several bugs and security issues. Recommendations: For Advancecomp version 2.3, update to a newer...

AdvanceCOMP 安全漏洞

AdvanceCOMP is a cross-platform command line tool for data compression. The product is capable of optimizing compressed files and reducing their size. A security vulnerability exists in AdvanceCOMP v2.3 that stems from the inclusion of a segmentation error...

PT-2022-22494 · Unknown +4 · Advancecomp +4

Name of the Vulnerable Software and Affected Versions: Advancecomp version 2.3 Description: A heap buffer overflow issue was discovered in Advancecomp. The software has been updated to fix several bugs and security issues. Recommendations: For Advancecomp version 2.3, update to a newer version th...

AdvanceCOMP 缓冲区错误漏洞

AdvanceCOMP is a cross-platform command line tool for data compression. The product is capable of optimizing compressed files and reducing their size. A security vulnerability exists in AdvanceCOMP v2.3, which stems from the inclusion of a heap buffer overflow...

Security Bulletin: Watson Machine Learning Accelerator is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22971)

Summary Watson Machine Learning Accelerator is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22971 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast t...

GHSA-8V75-8JJ8-77GF Magento 2 Community Edition XSS Vulnerability

A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of user roles...

Magento Stored Cross-site Scripting vulnerability in the admin panel

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with permissions to manage customer groups...

GHSA-QCX4-GFH8-W5P5 Blogifier does not properly restrict APIs

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname. The issue is patched in the 2.4 branch, but 2.5.5 is the lowest available patched version on https://www.nuget.org/packages/Blogifier.Core...

Blogifier does not properly restrict APIs

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname. The issue is patched in the 2.4 branch, but 2.5.5 is the lowest available patched version on https://www.nuget.org/packages/Blogifier.Core...

Elgg open redirect

Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect...

GHSA-87QX-G5WG-MWMJ RubyGems Cross-site Scripting vulnerability

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Cross Site Scripting XSS vulnerability in gem server display of homepage attribute that can...

PT-2022-18847 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Continuous Integration with Toad Edge Plugin versions 2.3 and earlier Description: The file browser in Jenkins Continuous Integration with Toad Edge Plugin may interpret some paths to files as absolute on Windows, resulting in a path...

BizTalk ESB Toolkit 安全漏洞

Microsoft BizTalk ESB Toolkit is a powerful publish/subscribe mechanism for messaging applications that work by creating and populating subscriptions, which provides an efficient and scalable platform for Service Oriented Architecture SOA applications, from Microsoft Corporation USA. A security...

Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services

Summary A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services. Vulnerability Details CVEID: CVE-2021-22939 DESCRIPTION: Node.js could allow a remote attacker to bypass security restrictions. If the https API was used...