AZL-12951 CVE-2022-2196 affecting package kernel for versions less than 5.15.102.1-1

A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM L0 advertising eIBRS support to L1. An attacker at L2 with code...

PT-2023-11358 · Unknown · Happyman Twmap

Name of the Vulnerable Software and Affected Versions: happyman twmap versions prior to v2.9 v4.31 Description: A critical issue was found in happyman twmap, affecting an unknown functionality of the file twmap3/data/ajaxCRUD/pointdata2.php. The manipulation of the id argument leads to sql...

DEBIAN-CVE-2022-46489

GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gfisomboxparseex function at boxfuncs.c...

AZL-45126 CVE-2017-20162 affecting package js-jquery 3.5.0-4

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has...

AZL-45201 CVE-2017-20162 affecting package nodejs-nodemon 2.0.3-5

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has...

GPAC MP4Box 安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b, which stems from...

GPAC MP4Box 缓冲区错误漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev649-ga8f438d20, which stems from a...

GPAC MP4Box 安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b, which stems from...

Nasm 安全漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in Nasm version v2.16, which stems from the inclusion of a global buffer overflow found in the component dbgdbgtypevalue in /output/outdbg.c. The vulnerability is caused by an error...

WordPress plugin Custom Field Template 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in the...

WordPress plugin Web Invoice SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

PT-2023-10325 · Enigma · Enigmax

Name of the Vulnerable Software and Affected Versions: enigmaX versions prior to 2.3 Description: A problematic issue has been found in the Scrambling Table Handler component, specifically affecting the getSeed function of the main.c file. This leads to a predictable seed in the pseudo-random...

PT-2023-1055 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a heap overflow vulnerability in the ksmbd decode ntlmssp auth blob function of the Linux kernel's ksmbd module. This vulnerability can be exploited by a remote...

PT-2022-11727 · Openmrs · Openmrs

Name of the Vulnerable Software and Affected Versions: OpenMRS openmrs-module-referenceapplication versions up to 2.11.x Description: This issue affects some unknown processing of the file omod/src/main/webapp/pages/userApp.gsp, leading to cross site scripting. The attack may be initiated remotel...

OpenMRS 跨站脚本漏洞

OpenMRS is an open source electronic medical record system from OpenMRS, Inc. in the United States. OpenMRS openmrs-module-referenceapplication A cross-site scripting vulnerability exists in OpenMRS openmrs-module-referenceapplication versions prior to 2.12.0, which originates in the component Us...

Nagios 跨站脚本漏洞

Nagios is an open source, free network monitoring tool from Nagios, Inc. A cross-site scripting vulnerability exists in Nagios NCPA versions prior to 2.4.0, which stems from unknown code in the file agent/listener/templates/tail.html, where manipulation of parameter names results in cross-site...

WordPress Plugin Eventify 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2022-40434

Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page...

PT-2022-25382 · Softr · Softr

Name of the Vulnerable Software and Affected Versions: Softr version 2.0 Description: The issue is related to HTML injection via the Name field of the Account page. This allows for potential malicious code execution. Recommendations: For Softr version 2.0, consider restricting access to the Accou...

CVE-2022-40434

Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page...