2303 matches found
CVE-2022-2494
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...
Ambit Technologies Itech Movie Portal Script 安全漏洞
Ambit Technologies Itech Movie Portal Script is a Movie Portal Script from Ambit Technologies, USA. A security vulnerability exists in Ambit Technologies Itech Movie Portal Script version 7.36, which stems from some unknown functionality in movie.php, where manipulation of the parameter f can lea...
CVE-2021-29755
IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications. IBM X-Force ID: 202015...
PT-2022-3806
Name of the Vulnerable Software and Affected Versions Redis versions 7.0.0 through 7.0.3 Description The issue is related to a heap overflow that can potentially lead to remote code execution. This occurs when a specially crafted XAUTOCLAIM command is executed on a stream key in a specific state...
IBM Engineering Lifecycle Optimization 安全漏洞
IBM Engineering Lifecycle Optimization ELO is an extension of the Engineering Lifecycle Management ELM portfolio from IBM America. They make it easier to collect and analyze data across the development environment to make better decisions. Automate reporting to ensure that the entire organization...
PT-2022-22004 · I3Geo · I3Geo
Name of the Vulnerable Software and Affected Versions: Portal do Software Publico Brasileiro i3geo version 7.0.5 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability was discovered via the request token.php file, which suggests it may be related to the...
i3geo 跨站脚本漏洞
i3geo is a saladesituacao open source application for developing interactive web maps. A security vulnerability exists in Portal do Software Publico Brasileiro i3geo version v7.0.5, which originates from a security issue in the svg2img.php file...
i3geo 跨站脚本漏洞
i3geo is a saladesituacao open source application for developing interactive web maps. A security vulnerability exists in i3geo version v7.0.5, which stems from the presence of XSS in requesttoken.php...
IBM i 跨站脚本漏洞
IBM i is a set of operating systems from IBM running in IBM Power Systems and IBM PureSystems. IBM i versions 7.2, 7.3, 7.4, and 7.5 have a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could exploi...
DEBIAN-CVE-2022-35414
softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translatefail path, leading to an ioreadx or iowritex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use ca...
CVE-2021-23163
JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF Cross-Site Request Forgery for specific endpoints. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.33.6 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6...
JFrog Artifactory 安全漏洞
JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog that supports clustering and high-availability Docker registries, and provides an end-to-end solution for automating the tracking of artifacts from development to production. A security...
GHSA-7F3X-X4PR-WQHJ Server-Side Request Forgery in parse-url
Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 7.0.0...
CVE-2022-2218
Cross-site Scripting XSS - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0...
CVE-2022-2216
Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 7.0.0...
PT-2022-9189 · Ibm · Ibm Jazz Team Server
Name of the Vulnerable Software and Affected Versions: IBM Jazz Team Server versions 6.0.6 through 7.0.2 Description: The issue allows a remote attacker to inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
PYSEC-2022-43162
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...
PT-2022-22133 · Pmb · Pmb
Name of the Vulnerable Software and Affected Versions: PMB version 7.3.10 Description: The issue allows reflected XSS via the id parameter in an lvl=author see request to "index.php". This can potentially lead to malicious script execution. Recommendations: For PMB version 7.3.10, consider...
iSpyConnect iSpy 路径遍历漏洞
iSpyConnect iSpy is an open source video surveillance application from iSpyConnect, Inc. A path traversal vulnerability exists in iSpyConnect iSpy version v7.2.2.0, which stems from susceptibility to path traversal...