12379 matches found
Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...
PT-2022-18945 · Bentley · Bentley View
Name of the Vulnerable Software and Affected Versions: Bentley View version 10.16.02.022 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fl...
Jenkins 跨站脚本漏洞
Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.A cross-site scripting vulnerability exists in the Jenkins CVS Plugin, which stems from the application not escaping the na...
PT-2022-18947 · Bentley · Bentley View
Name of the Vulnerable Software and Affected Versions: Bentley View version 10.16.02.022 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...
PT-2022-18960 · Bentley · Bentley View
Name of the Vulnerable Software and Affected Versions: Bentley View version 10.16.02.022 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fl...
Authentication flaw
Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without authentication...
spring-framework: RCE via Data Binding on JDK 9+
A flaw was found in Spring Framework, specifically within two modules called Spring MVC and Spring WebFlux, transitively affected from Spring Beans, using parameter data binding. This flaw allows an attacker to pass specially-constructed malicious requests to certain parameters and possibly gain...
Samsung Pass 安全漏洞
Samsung Pass is a secure and easy way to log in to websites and applications on cell phones using biometrics from Samsung South Korea. A security vulnerability exists in Samsung Pass versions prior to 3.7.07.5 that stems from the presence of incorrect exception handling. A local attacker exploite...
PT-2022-2857 · D Link · D-Link Dir-816L
Name of the Vulnerable Software and Affected Versions: D-Link DIR816L versions prior to FW206b01 Description: The issue is related to insufficient access control in the software of D-Link DIR816L routers. This allows remote attackers to access sensitive folders, specifically "folder view.php" and...
CVE-2022-27063
AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting XSS vulnerability via viewallcomments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...
Xwiki Platform 访问控制错误漏洞
XWiki Platform is a suite of wiki platforms for creating web collaboration applications from the XWiki Foundation in France. An access control error vulnerability exists in XWiki Platform, which stems from the fact that a guest user who does not have permission to view a wiki page can still list...
Bentley View 缓冲区错误漏洞
Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A buffer error vulnerability exists in Bentley View version 10.16.02.022. An attacker could exploit the vulnerability to force an out-of-bounds read to be triggered via a DXF file containing malicious data...
Kyocera Printer Information Disclosure Vulnerability (Mar 2022) - Active Check
Kyocera printers are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Bentley View 缓冲区错误漏洞
Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A buffer error vulnerability exists in Bentley View version 10.16.02.022. An attacker could exploit the vulnerability to force an out-of-bounds read to be triggered via a 3DS file containing malicious data...
Bentley View 缓冲区错误漏洞
Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A buffer error vulnerability exists in Bentley View version 10.16.02.022. An attacker could exploit the vulnerability to force an out-of-bounds read to be triggered via a 3DS file containing malicious data...
Bentley Systems Bentley View 资源管理错误漏洞
Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A resource management error vulnerability exists in Bentley View version 10.16.02.022. A remote attacker could exploit this vulnerability to execute arbitrary code on the target system via a specially crafted SKP file...
CVE-2022-27462
Cross Site Scripting XSS vulnerability in objects/function.php in function getDeviceID in WWBN AVideo through 11.6, via the yptDevice parameter to view/include/head.php...
CVE-2022-0825
The Amelia WordPress plugin before 1.0.49 does not have proper authorisation when managing appointments, allowing any customer to update other's booking status, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it...
CVE-2022-1026
Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function...
CVE-2022-1026 Kyocera Net View Address Book Exposure
Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function...