1829 matches found
PT-2022-3899 · General Electric · Inet +1
Name of the Vulnerable Software and Affected Versions: General Electric Renewable Energy iNET and iNET II versions prior to 8.3.0 Description: The issue is related to inadequate encryption strength in the software of General Electric Renewable Energy's iNET and iNET II products. This could allow ...
CVE-2021-27426
GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user...
PYSEC-2022-170
mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...
UBUNTU-CVE-2022-24766
mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...
SUSE-FU-2022:0868-1 Feature update for tcl and tk
This feature update for tcl and tk fixes the following issues: Update tcl and tk to version 8.6.12 jscSLE-21016, jscSLE-23284: - Move tcl.macros to /usr/lib/rpm/macros.d bsc1185662 - Use FAT LTO objects in order to provide proper static library bsc1138797 - Fix a bug in itcl that was affecting...
CVE-2022-22834
An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XSLT Injection vulnerability. Attackers could exploit this issue to achieve remote code execution...
abcm2ps 缓冲区错误漏洞
abcm2ps is a command line program by Sammy S. Individual developer in the United States. It can convert music tunes from ABC music notation to PostScript or SVG. A security vulnerability exists in abcm2ps v8.14.11 that allows remote attackers to cause a denial of service DoS via an unspecified...
DEBIAN-CVE-2022-26127
A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babelpacketexamin function in babeld/message.c...
FRRouting FRR 缓冲区错误漏洞
FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A buffer error vulnerability exists in FRRouting FRR, which stems from incorrect checking of input packet lengths in the babelpacketexamin function in babeld/message.c. A buffer overflow...
ALPINE-CVE-2022-0629
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
ALPINE-CVE-2022-0572
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
CVE-2022-0554
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2...
CVE-2022-0474
Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 and prior versions...
CVE-2021-44978
iCMS = 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability which causes remote code execution...
UBUNTU-CVE-2022-0417
Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...
AZL-8459 CVE-2022-0408 affecting package vim for versions less than 8.2.4743-1
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
CVE-2022-0413
Use After Free in GitHub repository vim/vim prior to 8.2...
UBUNTU-CVE-2022-0413
Use After Free in GitHub repository vim/vim prior to 8.2...