GHSA-JP3M-P26H-MM7V Apache JSPWiki CSRF due to crafted invocation on the Image plugin

A carefully crafted invocation on the Image plugin could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow a group privilege escalation of the attacker's account. Further examination of this issue established that it could also be used to modify the email associated...

HUAWEI HarmonyOS 参数注入漏洞

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in HUAWEI HarmonyOS version 2.0, which stems from a parameter injection vulnerability in the Settings...

HUAWEI HarmonyOS 安全漏洞

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in HUAWEI HarmonyOS version 2.0, which stems from the failure of the diag-router module to intercept...

SAMSUNG Mobile devices 代码问题漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Samsung Update Setup prior to version 2.2.9.50, which stems from a DLL hijacking vulnerability that can...

USN-5541-1 linux-azure vulnerabilities

Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not perform permission checks correctly in some situations. A local attacker could possibly use this to gain administrative privileges. CVE-2021-4197 Jann Horn discovered that the FUSE file system i...

DEBIAN-CVE-2022-2549

NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV...

PT-2022-4020 · Jenkins · Jenkins Compuware Source Code Download For Endevor +1

Name of the Vulnerable Software and Affected Versions: Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin versions 2.0.12 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware...

Nasm 安全漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in Nasm version 2.16rc0, which stems from a memory leak in its nasmlib/alloc.c component...

PT-2022-5005 · Hitachi Energy · Hitachi Energy Msm

Name of the Vulnerable Software and Affected Versions: Hitachi Energy MSM versions V2.2 and prior Description: A vulnerability exists in the HTTP web interface where it does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted th...

Joplin 跨站脚本漏洞

Joplin is an open source notes and to-do list application. A security vulnerability exists in Joplin version v2.8.8, which stems from the fact that an attacker can execute arbitrary commands by injecting a crafted payload into a Node header...

CVE-2022-33198

Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin = 2.0.2 at WordPress...

DEBIAN-CVE-2022-2453

Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...

UBUNTU-CVE-2022-2453

Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...

CVE-2022-2117

The GiveWP plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.20.2 via the /donor-wall REST-API endpoint which provides unauthenticated users with donor information even when the donor wall is not enabled. This functionality has been...

DEBIAN-CVE-2022-2400

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...

EIPStackGroup OpENer 缓冲区错误漏洞

EIPStackGroup OpENer is a software from the EIPStackGroup organization for providing EtherNet/IP stacking functionality to IO adapter devices . A buffer error vulnerability exists in EIPStackGroup OpENer version v2.3.0, which stems from the discovery of a stack overflow contained via...

DRUPAL-CONTRIB-2022-048

This module enables you to generate print versions of content. Some installations of the module make use of the dompdf/dompdf third-party dependency. Security vulnerabilities exist for versions of dompdf/dompdf Note on 3rd party vulnerabilities This security advisory corresponds to a 3rd party...

CVE-2022-31904

EGT-Kommunikationstechnik UG Mediacenter before v2.0 was discovered to contain a cross-site scripting XSS vulnerability via the component OnlineUpdate.php...

Patient Management System 安全漏洞

Clinics Patient Management System is a patient management system for clinics by Carlo Montero, an individual developer. A security vulnerability exists in Patient Management System version 2.0, which stems from an unrestricted upload due to the parameter profilepicture, and can be exploited by an...

Github Git 代码问题漏洞

Github Git is a free, open source distributed version control system. A security vulnerability exists in Github Git that originates from the ability to bypass secure directory protection and affects the following products and versions: Git versions prior to 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4,...