8488 matches found
CVE-2022-26300
EOS v2.1.0 was discovered to contain a heap-buffer-overflow via the function txntestgenplugin...
CVE-2022-25488
Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php...
CVE-2022-25488
Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php...
PT-2022-18283 · Jenkins · Jenkins Dashboard View Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Dashboard View Plugin versions 2.18 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the Jenkins Dashboard View Plugin does not perform URL validation for the Iframe...
Tiny File Manager路径遍历漏洞
Tiny File Manager is a web-based open source file manager. A path traversal vulnerability in the tinyfilemanager.php file upload function in Tiny File Manager 2.4.1 allows remote attackers to upload malicious PHP files to the webroot using a valid user account and achieve code execution on the...
CVE-2022-23943
Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions...
Apache HTTP Server 环境问题漏洞
Apache HTTP Server is an open source web server from the Apache Foundation. Apache HTTP Server is vulnerable to an environmental issue that results from Apache HTTP Server's inability to close inbound connections when dropping the body of a request, leading to request smuggling. The vulnerability...
Timescale TimescaleDB 安全漏洞
Timescale TimescaleDB is an open source database software from Timescale, Inc. It is designed to make SQL extensible for time series data. A security vulnerability exists in TimescaleDB 1.x and 2.x prior to Timescale TimescaleDB 2.5.2. The vulnerability could allow elevation of privilege during...
CVE-2022-26967
GPAC 2.0 allows a heap-based buffer overflow in gfbase64encode. It can be triggered via MP4Box...
PT-2022-18146 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: GPAC version 2.0 Description: The issue is a heap-based buffer overflow in the gf base64 encode function. It can be triggered via MP4Box. Recommendations: For GPAC version 2.0, at the moment, there is no information about a newer version that...
The vulnerability of the json-smart-v1 and json-smart-v2 libraries, which stems from insufficient checking of unusual or exceptional states, allows attackers to trigger an emergency shutdown of the application or disclose protected information.
The vulnerability of the json-smart-v1 and json-smart-v2 libraries is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an application to terminate abnormally or expose protected information...
CVE-2022-24608
Luocms v2.0 is affected by Cross Site Scripting XSS in /admin/news/sortadd.php and /inc/function.php...
CVE-2022-24608
Luocms v2.0 is affected by Cross Site Scripting XSS in /admin/news/sortadd.php and /inc/function.php...
CVE-2022-24607
Luocms v2.0 is affected by SQL Injection in /admin/news/newsok.php...
CVE-2022-24606
Luocms v2.0 is affected by SQL Injection in /admin/news/sortok.php...
CVE-2022-24603
Luocms v2.0 is affected by SQL Injection in /admin/news/sortmod.php...
CVE-2022-24602
Luocms v2.0 is affected by SQL Injection in /admin/news/newsmod.php...
CVE-2022-24604
Luocms v2.0 is affected by SQL Injection in /admin/link/linkmod.php...