CVE-2022-27841: Improper Check or Handling of Exceptional Conditions

Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without authentication...

Samsung Pass 安全漏洞

Samsung Pass is a secure and easy way to log in to websites and applications on cell phones using biometrics from Samsung South Korea. A security vulnerability exists in Samsung Pass versions prior to 3.7.07.5 that stems from the presence of incorrect exception handling. A local attacker exploite...

PT-2022-2857 · D Link · D-Link Dir-816L

Name of the Vulnerable Software and Affected Versions: D-Link DIR816L versions prior to FW206b01 Description: The issue is related to insufficient access control in the software of D-Link DIR816L routers. This allows remote attackers to access sensitive folders, specifically "folder view.php" and...

CVE-2022-27063

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting XSS vulnerability via viewallcomments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...

Xwiki Platform 访问控制错误漏洞

XWiki Platform is a suite of wiki platforms for creating web collaboration applications from the XWiki Foundation in France. An access control error vulnerability exists in XWiki Platform, which stems from the fact that a guest user who does not have permission to view a wiki page can still list...

Bentley View 缓冲区错误漏洞

Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A buffer error vulnerability exists in Bentley View version 10.16.02.022. An attacker could exploit the vulnerability to force an out-of-bounds read to be triggered via a DXF file containing malicious data...

Kyocera Printer Information Disclosure Vulnerability (Mar 2022) - Active Check

Kyocera printers are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Bentley View 缓冲区错误漏洞

Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A buffer error vulnerability exists in Bentley View version 10.16.02.022. An attacker could exploit the vulnerability to force an out-of-bounds read to be triggered via a 3DS file containing malicious data...

Bentley Systems Bentley View 资源管理错误漏洞

Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A resource management error vulnerability exists in Bentley View version 10.16.02.022. A remote attacker could exploit this vulnerability to execute arbitrary code on the target system via a specially crafted SKP file...

Bentley View 缓冲区错误漏洞

Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A buffer error vulnerability exists in Bentley View version 10.16.02.022. An attacker could exploit the vulnerability to force an out-of-bounds read to be triggered via a 3DS file containing malicious data...

CVE-2022-27462

Cross Site Scripting XSS vulnerability in objects/function.php in function getDeviceID in WWBN AVideo through 11.6, via the yptDevice parameter to view/include/head.php...

CVE-2022-27462: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in objects/function.php in function getDeviceID in WWBN AVideo through 11.6, via the yptDevice parameter to view/include/head.php...

CVE-2022-25356: XML Injection (aka Blind XPath Injection)

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection...

CVE-2022-0825

The Amelia WordPress plugin before 1.0.49 does not have proper authorisation when managing appointments, allowing any customer to update other's booking status, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it...

CVE-2022-1026

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function...

CVE-2022-1026 Kyocera Net View Address Book Exposure

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function...

PT-2022-7705

Name of the Vulnerable Software and Affected Versions Kyocera Net View affected versions not specified Description The issue concerns an insufficiently protected address book export function in Kyocera Net View, which unintentionally exposes sensitive user information, including usernames and...

CVE-2022-26572: Undefined Security Weakness

Xerox ColorQube 8580 was discovered to contain an access control issue which allows attackers to print, view the status, and obtain sensitive information...

CVE-2022-1026: Insufficiently Protected Credentials

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function...

UBUNTU-CVE-2021-39908

In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 certain Unicode characters can be abused to commit malicious code into projects without being noticed in merge request or source code...