2954 matches found
CVE-2022-1234
XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device...
CVE-2022-27441
A stored cross-site scripting XSS vulnerability in TPCMS v3.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Phone text box...
TPCMS 跨站脚本漏洞
TPCMS is a content management system.A cross-site scripting vulnerability exists in TPCMS version 3.2, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute arbitrary web script or HTML by injecting a...
TPCMS 日志信息泄露漏洞
TPCMS is an open source content management system from the individual developers at Source of Happiness. A security vulnerability exists in TPCMS version 3.2, which can be exploited by an attacker to access the ThinkPHP log directory and obtain sensitive information such as administrator username...
CVE-2022-0350
Cross-site Scripting XSS - Stored in GitHub repository vanessa219/vditor prior to 3.8.13...
CVE-2021-45031
A vulnerability in MEPSAN's USC+ before version 3.0 has a weakness in login function which lets attackers to generate high privileged accounts passwords...
Firmware Analysis and Comparison Tool 跨站请求伪造漏洞
Firmware Analysis and Comparison Tool FACT is a firmware analysis and comparison tool. firmware Analysis and Comparison Tool version v3.2 contains a cross-site request forgery vulnerability that stems from a WEB application that does not adequately validate that the request is from a trusted user...
Wyze Labs Wyze Cam 缓冲区错误漏洞
Wyze Labs Wyze Cam is a series of cameras from the US company Wyze Labs. Wyze Labs Wyze Cam has a security vulnerability that stems from a buffer overflow vulnerability in the presence of a stack. An attacker could exploit the vulnerability to run arbitrary code on the affected device. The...
CVE-2022-25521
NUUO v03.11.00 was discovered to contain access control issue...
CVE-2021-43666
A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...
jhead 缓冲区错误漏洞
jhead is a tool for modifying JPEG file information. A buffer error vulnerability exists in jhead version 3.04 and jpgfile.c version 3.05, which stems from a heap-based buffer overflow vulnerability in the RemoveUnknownSections function in jpgfile.c. The vulnerability is caused by a heap-based...
CVE-2021-44345
Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System 3.0 is vulnerable to SQL Injection...
PT-2022-12049 · Beijing Wisdom Vision Technology Industry Co. · One Card Integrated Management System
Name of the Vulnerable Software and Affected Versions: Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System version 3.0 Description: The system is susceptible to SQL Injection. Recommendations: For version 3.0, update to a newer version that contains a fix for...
Xbtit 跨站脚本漏洞
Xbtit is a tracker software. A cross-site scripting vulnerability exists in Xbtit version 3.1. The vulnerability occurs when /ajaxchat/sendChatData.php fails to properly validate the value of the "n" POST parameter. An attacker could exploit this vulnerability to execute malicious JavaScript code...
Xbtit SQL注入漏洞
Xbtit is an open source tracker software. version 3.1 of Xbtit is vulnerable to SQL injection, which stems from a missing filter escape for SQL statements in the sid parameter of the ajaxchat/getHistoryChatData.php file. An attacker could exploit this vulnerability to extract sensitive data such ...
Nicotine+安全漏洞
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Designed to be a pleasant, free and open source FOSS alternative to the official Soulseek client, it provides additional functionality while staying synchronized with the Soulseek protocol. Nicotine+ version 3.0.3 and later A...
UBUNTU-CVE-2022-0890
NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2...
Microsoft SMBv3 代码注入漏洞
Microsoft SMBv3 is a support firmware from Microsoft Corporation USA that provides SMB functionality for devices. A code injection vulnerability exists in Microsoft SMBv3 Client/Server. The following products and versions are affected: Windows 10 Version 21H1 for x64-based Systems,Windows 10...
CVE-2022-22909
HotelDruid v3.0.3 was discovered to contain a remote code execution RCE vulnerability which is exploited via an attacker inserting a crafted payload into the name field under the Create New Room module...