CVE-2022-23446

A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole application unresponsive via changing its root directory access permission...

Fortinet FortiEDR 安全漏洞

Fortinet FortiEDR is a scratch-built endpoint security solution from Fortinet, U.S.A. A denial-of-service vulnerability exists in Fortinet FortiEDR versions 5.0.3 and earlier, which stems from a resource management error that could be exploited by an attacker to make an entire application...

Synametrics Technologies SynaMan 安全漏洞

Synametrics Technologies SynaMan is a remote file manager from Synametrics Technologies. A security vulnerability exists in Synametrics Technologies SynaMan v5.1 and below, which can be exploited by an authenticated attacker to execute arbitrary code and elevate privileges via the HTTP interface...

Minor update (5) for Vivaldi Desktop Browser 5.1

Download Vivaldi The following improvements were made since the fourth 5.1 stable, minor update: Chromium Upgraded to 98.0.4758.141 fixes CVE-2022-1096 Main photo byAlisa Anton...

CVE-2022-23347

BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks...

CVE-2022-23347

BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks...

CVE-2022-23350

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-23350

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting XSS vulnerability...

Big Ant Studios BigAnt Software BigAnt Server 跨站脚本漏洞

BigAnt Software BigAnt Server is a server from Big Ant Studios in Australia. BigAnt Software BigAnt Server version 5.6.06 suffers from a security vulnerability, no details of the vulnerability are available at this time...

WordPress plugin SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress Zero Spam plugin is a WordPress open source application plugin. SQL injection vulnerability exists in versions of WordPress Zero Spam plugin prior to 5.2.11. The vulnerability stems from t...

CVE-2022-24696

Mirametrix Glance before 5.1.1.42207 released on 2018-08-30 allows a local attacker to elevate privileges. NOTE: this is unrelated to products from the glance.com and glance.net websites...

CVE-2021-39025

IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web backend is down. IBM X-Force 213863...

PT-2022-13162 · WordPress · Wp Visitor Statistics

Name of the Vulnerable Software and Affected Versions: WP Visitor Statistics Real Time Traffic versions prior to 5.6 Description: The issue concerns a SQL injection problem. It occurs because the id parameter is not properly sanitised and escaped before being used in a SQL statement via the...

Alfresco Community Edition 跨站脚本漏洞

Alfresco Software Alfresco Community Edition is the United States Alfresco Software, Inc. of a set of open source enterprise content management system community edition. The system includes document management, office collaboration and other features. A security vulnerability exists in Alfresco...

CVE-2022-0265

Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1...

CVE-2022-23898

MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml...

CVE-2022-23899

MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java...

CVE-2022-25125

MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp...

CVE-2022-25138

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Name parameter...

MingSoft Mcms SQL注入漏洞

MingSoft Mcms is China's MingFei MingSoft company's a complete open source J2ee system . A security vulnerability exists in MingSoft Mcms v5.2.5 that allows an attacker to perform a SQL injection attack via the search.do parameter in the file /web/MCmsAction.java. No details of the vulnerability...