343 matches found
PT-2022-33463 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A refcount leak was discovered in the spufs init isolated loader function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For versions pri...
CVE-2022-23686
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...
PT-2022-17935 · WordPress · Multivendor Marketplace Solution For Woocommerce
Name of the Vulnerable Software and Affected Versions: Multivendor Marketplace Solution for WooCommerce WordPress plugin versions prior to 3.8.12 Description: The issue is related to a lack of authorization and CSRF protection in multiple AJAX actions. This could allow authenticated users, such a...
CVE-2022-36216
DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in membertoadmin.php...
Google Pixel 缓冲区错误漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a buffer error vulnerability. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...
GSD-2022-1004269 block: disable the elevator int del_gendisk
block: disable the elevator int delgendisk This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit...
Fedora: Security Advisory for origin (FEDORA-2022-3e1ade35db)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
GHSA-FRGF-RV99-862X Roundup Cross-site Scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in cgi/client.py in Roundup before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the template argument to the /issue program...
Command Injection
Overview git is a Ruby library that can be used to create, read and manipulate Git repositories by wrapping system calls to the git binary. Affected versions of this package are vulnerable to Command Injection via git argument injection. When calling the fetchremote = 'origin', opts = function, t...
PT-2021-21531 · Apache · Apache Traffic Server
Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 8.1.2 Apache Traffic Server versions 9.0.0 through 9.0.1 Description: The issue is related to improper input validation in the header parsing of Apache Traffic Server, allowing an attacker to smugg...
Fedora: Security Advisory for libjpeg-turbo (FEDORA-2021-359a715688)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Mediatek 芯片输入验证错误漏洞
Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. There is no information about this vulnerability yet, so stay tuned to CNNVD or vendor announcements...
Mediatek 芯片缓冲区错误漏洞
Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. There is no information about this vulnerability yet, so stay tuned to CNNVD or vendor announcements...
Apple iOS < 14.6 Multiple Vulnerabilities (HT212528)
Binary data appleios146check.nbin...
WordPress 5.7.x < 5.7.2 Object injection
According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35733)
Extreme cms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...
SQL Injection Vulnerability in Dongsheng Logistics Software (CNVD-2021-11043)
Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004, the company's main business expanded into three major segments, namely, logistics consulting, logistics information platform and logistics software. A SQL injection vulnerability exists in Dongsheng Logistics Software, which...
Google Android Input Validation Error Vulnerability
Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android Pixel has an input validation error vulnerability, there is currently no information about this vulnerability, please stay tuned to CNNVD or the manufacturer's announcement...
Google Android Input Validation Error Vulnerability
Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android Pixel has an input validation error vulnerability, there is currently no information about this vulnerability, please stay tuned to CNNVD or the manufacturer's announcement...