8488 matches found
CVE-2022-37730
In ftcms 2.1, there is a Cross Site Request Forgery CSRF vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server corresponding to the identity authentication...
CVE-2022-22520
A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2...
ftcms 跨站请求伪造漏洞
ftcms is a content management system from ftcms, Inc. A security vulnerability exists in ftcms version 2.1, which stems from a vulnerability in its News.php page that allows an attacker to spoof a link and trick others into clicking on a malicious link or accessing a page that contains attack cod...
PT-2022-4712
Name of the Vulnerable Software and Affected Versions SUSE Rancher versions prior to 2.6.4 Rancher versions prior to 2.5.13 Description A vulnerability in SUSE Rancher allows authenticated users, including Cluster Owners, Cluster Members, Project Owners, and Project Members, to read credentials,...
ftcms 跨站脚本漏洞
ftcms is a content management system from ftcms, Inc. A security vulnerability exists in ftcms version 2.1, which stems from its poster.PHP page that allows an attacker to insert malicious JavaScript code into a web page, resulting in the triggering of malicious code when a user/administrator...
PT-2022-24053 · Ftcms · Ftcms
Name of the Vulnerable Software and Affected Versions: ftcms version 2.1 Description: The issue allows an attacker to insert malicious JavaScript code into the web page, causing the user or administrator to trigger malicious code when accessing. This is a result of a XSS vulnerability in the...
CVE-2022-2901
Improper Authorization in GitHub repository chatwoot/chatwoot prior to 2.8...
PT-2022-4659
Name of the Vulnerable Software and Affected Versions Go versions prior to 1.18.6 Go versions 1.19.x prior to 1.19.1 Description The issue is related to the net/http package in Go, where an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error, leading to a denial ...
PT-2022-17286 · WordPress · The Visual Portfolio
Name of the Vulnerable Software and Affected Versions: The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin versions prior to 2.18.0 Description: The issue concerns a lack of proper authorization checks in some REST endpoints of the plugin, allowing unauthenticated users to call these...
Quarkus 环境问题漏洞
Quarkus is a cloud-native Linux container-first framework for writing Java applications. A security vulnerability exists in Quarkus version 2.10.x that stems from an HTTP request header environment that will not terminate...
PT-2022-13755 · Undertow · Undertow
Name of the Vulnerable Software and Affected Versions: Undertow affected versions not specified Description: A flaw was found in Undertow, related to flow control handling by the browser over HTTP/2, which may cause overhead or a denial of service in the server. This issue is due to an incomplete...
CVE-2022-35019
Advancecomp v2.3 was discovered to contain a segmentation fault...
CVE-2022-35018
Advancecomp v2.3 was discovered to contain a segmentation fault...
DEBIAN-CVE-2022-35018
Advancecomp v2.3 was discovered to contain a segmentation fault...
AZL-43588 CVE-2022-35016 affecting package advancecomp 2.5-1
Advancecomp v2.3 was discovered to contain a heap buffer overflow...
CVE-2022-35017
Advancecomp v2.3 was discovered to contain a heap buffer overflow...
PT-2022-22499 · Unknown +4 · Advancecomp +4
Name of the Vulnerable Software and Affected Versions: Advancecomp version 2.3 Description: A heap buffer overflow issue was discovered in Advancecomp via the component interceptor memcpy at /sanitizer common/sanitizer common interceptors.inc. This issue affects the specified version of...
AdvanceCOMP 安全漏洞
AdvanceCOMP is a cross-platform command line tool for data compression. The product is capable of optimizing compressed files and reducing their size. A security vulnerability exists in AdvanceCOMP v2.3 that stems from a segmentation error...
Allied Telesis CentreCOM AR260S 操作系统命令注入漏洞
The Allied Telesis CentreCOM AR260S is a basic VPN access router from Allied Telesis Japan. A security vulnerability exists in the Allied Telesis CentreCOM AR260S V2 version, which is caused by a system command injection via telnet...