JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 3.0.0, which originates from the component scannerliteraliscreated in /jerry-core/parser/js/js-scanner-util.c contains a heap buffer overflow...

kernel: can: m_can: m_can_tx_handler(): fix use after free of skb

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the Controller Area Network CAN Bosch MCAN driver when transmitting packets, where a socket buffer is freed prematurely during transmission handling. A local attacker could exploit this vulnerability to cause a system...

Adslr VEC40G 操作系统命令注入漏洞

The Adslr VEC40G is a high performance security gateway from Flying Fish Star Technology Adslr, Chengdu, China. An operating system command injection vulnerability exists in the Adslr VEC40G version 3.0, which stems from an incorrect operation of the parameter COUNT resulting in os command...

WordPress Plugin Pricing Tables For WPBakery Page Builder 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in...

Session fixation vulnerability in azure-ad

azure-ad 303.va91ef20ee49f and earlier does not invalidate the existing session on login. This allows attackers to use social engineering techniques to gain administrator access to Jenkins. azure-ad 306.va7083923fd50 invalidates the existing session on login...

UBUNTU-CVE-2022-48279

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity C language codebase...

CVE-2022-4422

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0...

CVE-2022-43581

IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins and execute code. IBM X-Force ID: 238805...

User Management System 跨站脚本漏洞

User Management System is a Php User Management System using Stored Procedures by Anuj Kumar Personal Developer. A security vulnerability exists in Phpgurukul User Registration & User Management System version v3.0, which can be exploited by an attacker to conduct a cross-site scripting attack vi...

Veeam Backup for Google Cloud 授权问题漏洞

Veeam Backup for Google Cloud is a data backup software from Veeam USA. A security vulnerability exists in Veeam Backup for Google Cloud versions v1.0 and v3.0, which stems from a vulnerability that allows attackers to bypass the authentication mechanism...

ALPINE-CVE-2022-3602

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate...

Carlo Gavazzi UWP 授权问题漏洞

Carlo Gavazzi UWP is a monitoring and control Universal Web Platform from Carlo Gavazzi. It is used for applications such as building automation, energy efficiency performance management and parking lot guidance. An authorization issue vulnerability exists in Carlo Gavazzi UWP version 3.0, CPY Ca...

PT-2022-24070 · Phicomm · Phicomm Fir151B A2 +3

Name of the Vulnerable Software and Affected Versions: Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers version 3.0.1.17 Description: The issue is related to a remote command execution vulnerability. This vulnerability can be exploited via the pingAddr parameter of the tracert...

HongCMS 安全漏洞

HongCMS is an open source lightweight content management system CMS. A security vulnerability exists in HongCMS v3.0, which stems from an issue in the /template/edit component that allows an attacker to obtain a shell...

CVE-2022-29877

A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850...

PT-2022-2609

Name of the Vulnerable Software and Affected Versions Ruby versions 2.6.0 through 2.6.9 Ruby versions 2.7.x through 2.7.5 Ruby versions 3.0.0 through 3.0.3 Ruby versions 3.1.0 through 3.1.1 Description The issue is related to a buffer over-read in Ruby, specifically in String-to-Float conversion,...

CVE-2021-45031

A vulnerability in MEPSAN's USC+ before version 3.0 has a weakness in login function which lets attackers to generate high privileged accounts passwords...

CVE-2021-43666

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...

CVE-2021-44345

Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System 3.0 is vulnerable to SQL Injection...

PT-2022-12049 · Beijing Wisdom Vision Technology Industry Co. · One Card Integrated Management System

Name of the Vulnerable Software and Affected Versions: Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System version 3.0 Description: The system is susceptible to SQL Injection. Recommendations: For version 3.0, update to a newer version that contains a fix for...