3192 matches found
UBUNTU-CVE-2020-28613
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state.
...
CMSimple 跨站脚本漏洞
CMSimple is a free content management system. version 5.4 of CMSimple contains a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the clie...
Zyxel VMG3312-T20A 安全漏洞
The Zyxel VMG3312-T20A is a state-of-the-art VDSL2 gateway from China's Heqin Technology Zyxel. A security vulnerability exists in the Zyxel VMG3312-T20A version 5.30ABFX.5C0, which stems from a potential buffer overflow vulnerability found in some internal functions. An authenticated, local...
PT-2022-11859 · Laravel · Laravel
Name of the Vulnerable Software and Affected Versions: laravel version 5.8.38 Description: A Remote Code Execution issue exists via an unserialize pop chain in certain functions, including destruct in RoutingPendingResourceRegistration.php, call in QueueCapsuleManager.php, and invoke in...
CVE-2022-23446
A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole application unresponsive via changing its root directory access permission...
Synametrics Technologies SynaMan 安全漏洞
Synametrics Technologies SynaMan is a remote file manager from Synametrics Technologies. A security vulnerability exists in Synametrics Technologies SynaMan v5.1 and below, which can be exploited by an authenticated attacker to execute arbitrary code and elevate privileges via the HTTP interface...
Fortinet FortiEDR 安全漏洞
Fortinet FortiEDR is a scratch-built endpoint security solution from Fortinet, U.S.A. A denial-of-service vulnerability exists in Fortinet FortiEDR versions 5.0.3 and earlier, which stems from a resource management error that could be exploited by an attacker to make an entire application...
Minor update (5) for Vivaldi Desktop Browser 5.1
Download Vivaldi The following improvements were made since the fourth 5.1 stable, minor update: Chromium Upgraded to 98.0.4758.141 fixes CVE-2022-1096 Main photo byAlisa Anton...
CVE-2022-23350
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting XSS vulnerability...
CVE-2022-23347
BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks...
CVE-2022-23350
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting XSS vulnerability...
CVE-2022-23347
BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks...
Big Ant Studios BigAnt Software BigAnt Server 跨站脚本漏洞
BigAnt Software BigAnt Server is a server from Big Ant Studios in Australia. BigAnt Software BigAnt Server version 5.6.06 suffers from a security vulnerability, no details of the vulnerability are available at this time...
WordPress plugin SQL注入漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress Zero Spam plugin is a WordPress open source application plugin. SQL injection vulnerability exists in versions of WordPress Zero Spam plugin prior to 5.2.11. The vulnerability stems from t...
CVE-2022-24696
Mirametrix Glance before 5.1.1.42207 released on 2018-08-30 allows a local attacker to elevate privileges. NOTE: this is unrelated to products from the glance.com and glance.net websites...
CVE-2021-39025
IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web backend is down. IBM X-Force 213863...
PT-2022-13162 · WordPress · Wp Visitor Statistics
Name of the Vulnerable Software and Affected Versions: WP Visitor Statistics Real Time Traffic versions prior to 5.6 Description: The issue concerns a SQL injection problem. It occurs because the id parameter is not properly sanitised and escaped before being used in a SQL statement via the...
Alfresco Community Edition 跨站脚本漏洞
Alfresco Software Alfresco Community Edition is the United States Alfresco Software, Inc. of a set of open source enterprise content management system community edition. The system includes document management, office collaboration and other features. A security vulnerability exists in Alfresco...