381 matches found
PT-2022-17935 · WordPress · Multivendor Marketplace Solution For Woocommerce
Name of the Vulnerable Software and Affected Versions: Multivendor Marketplace Solution for WooCommerce WordPress plugin versions prior to 3.8.12 Description: The issue is related to a lack of authorization and CSRF protection in multiple AJAX actions. This could allow authenticated users, such a...
com.datastax.oss.quarkus:cassandra-quarkus-client (=1.0.0), com.datastax.oss.quarkus:cassandra-quarkus-client-deployment (>=1.0.0 <=1.1.1) +45 more potentially affected by CVE-2021-3914 via io.smallrye:smallrye-health-ui (>=2.2.3 <=3.1.1)
io.smallrye:smallrye-health-ui MAVEN version =2.2.3, =1.0.0, =1.0.4, =0.4.0, =1.2.3.Final, =1.2.3.Final, =1.2.3.Final, =1.3.0.Beta1, =1.2.3.Final, =1.2.3.Final, =1.2.3.Final, =1.2.1.Final, =1.2.2.Final and more Source cves: CVE-2021-3914 Source advisory: OSV:GHSA-PVC3-WVXR-7CMF...
com.digitalpetri.opcua:uanodeset-parser (=0.4.0), com.festo.aas:p4m-helpers (>=1.0.0 <=1.0.4) +59 more potentially affected by CVE-2022-25897 via org.eclipse.milo:sdk-server (>=0.1.0 <=0.6.7)
org.eclipse.milo:sdk-server MAVEN version =0.1.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.2.1, =0.2.1, =0.2.0, =0.2.0, =0.2.6 - de.fraunhofer.iosb.ilt.faaast.client:core =1.1.0 and more Source cves: CVE-2022-25897 Source advisory: SNYK:JAVA-ORGECLIPSEMILO-2990191...
@actyx-contrib/actyx-tutorial-simulator (=0.1.0), @adaptier/opcua-browser (>=1.0.0 <=1.0.1) +96 more potentially affected by CVE-2022-21208 via node-opcua (>=2.100.0 <=2.73.1)
node-opcua NPM version =2.100.0, =1.0.0, =1.0.0, =0.1.6, =1.0.2, =1.1.19, =1.3.2-alpha.36, =1.4.15-alpha.218, =1.4.15-alpha.66, =1.4.15-alpha.183, =1.4.15-alpha.61, =1.3.6-alpha.36, =1.4.15-alpha.65 and more Source cves: CVE-2022-21208 Source advisory: SNYK:JS-NODEOPCUA-2988723...
CVE-2022-36216
DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in membertoadmin.php...
Google Pixel 缓冲区错误漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a buffer error vulnerability. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...
GSD-2022-1004269 block: disable the elevator int del_gendisk
block: disable the elevator int delgendisk This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit...
Fedora: Security Advisory for origin (FEDORA-2022-3e1ade35db)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
org.jenkins-ci.plugins:php (=1.0), org.jenkins-ci.plugins:silk-performer-plugin (>=2.0.0-beta <=2.0.1-beta) potentially affected by CVE-2022-34783 via org.jenkins-ci.plugins:plot (>=1.5 <=2.1.0)
org.jenkins-ci.plugins:plot MAVEN version =1.5, =2.0.0-beta, =2.0.1-beta Source cves: CVE-2022-34783 Source advisory: OSV:GHSA-HPF7-MMQW-G6VQ...
a62-emotion (>=0.10.12 <=0.11.4), agent-atm (>=0.1.0 <=0.1.1) +102 more potentially affected by CVE-2022-29202 via tensorflow-cpu (>=1.15.0 <=2.5.3)
tensorflow-cpu PYPI version =1.15.0, =0.10.12, =0.1.0, =2.0.0, =2.0.0, =1.0.0, =0.0.5, =0.3.0, =0.0.1, =0.8.1, =0.1.1, =1.3.0, =0.1.0.dev1, =0.1.0.dev202107081840 and more Source cves: CVE-2022-29202 Source advisory: OSV:GHSA-CWPM-F78V-7M5C...
GHSA-FRGF-RV99-862X Roundup Cross-site Scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in cgi/client.py in Roundup before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the template argument to the /issue program...
com.cosium.murmur:vysper (=0.8), com.day.cq:cq-compat-codeupgrade (>=1.0.2 <=1.2.10) +39 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (>=1.2.1 <=2.0.5)
org.apache.jackrabbit:jackrabbit-core MAVEN version =1.2.1, =1.0.2, =5.3.4, =3.2.10-1-SP3seam2hibernate5, =3.2.10-1-SP3seam2hibernate5, =3.2.10-1-SP3seam2hibernate5, =3.2.10-1-SP3seam2hibernate5, =3.2.10-1-SP3seam2hibernate5, =3.2.10-1-SP3seam2hibernate5, =6.0.2, =1.1.2, =0.4.0-incubating, =1.3.0...
com.groupon.jenkins-ci.plugins:DotCi (>=2.8.9 <=2.40.00), com.groupon.jenkins-ci.plugins:DotCi-Fig-template (=1.1.0) +5 more potentially affected by CVE-2018-1000415 via com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.16 <=1.25)
com.sonyericsson.hudson.plugins.rebuild:rebuild MAVEN version =1.16, =2.8.9, =1.1.3, =1.7.2, =1.1.2, =1.0.0, =1.1.2 - hudson.plugins:project-inheritance =2.0.0 Source cves: CVE-2018-1000415 Source advisory: OSV:GHSA-7M8V-W6F9-Q2F9...
3nit-utils (>=0.30.0 <=1.0.2), 6ix (=0.0.0-canary.0) +1008 more potentially affected by CVE-2022-25858 via terser (>=4.0.0 <=4.8.0)
terser NPM version =4.0.0, =0.30.0, =0.0.0-canary.0, =0.0.1, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.10 - @agilejs/cli =1.0.0 and more Source cves: CVE-2022-25858 Source advisory: SNYK:JS-TERSER-2806366...
Command Injection
Overview git is a Ruby library that can be used to create, read and manipulate Git repositories by wrapping system calls to the git binary. Affected versions of this package are vulnerable to Command Injection via git argument injection. When calling the fetchremote = 'origin', opts = function, t...
abi-ds-utils (>=0.1.2 <=0.1.9), abi-pyspark-utils (>=0.1.1 <=0.1.4) +119 more potentially affected by CVE-2021-38296 via pyspark (>=2.1.2 <=3.1.2)
pyspark PYPI version =2.1.2, =0.1.2, =0.1.1, =0.5.1, =0.2.0, =1.0.0, =0.9.1, =0.1.57, =0.11.0, =0.14.0b20211027, =2.0.0, =2.5.0b20240324 and more Source cves: CVE-2021-38296 Source advisory: OSV:PYSEC-2022-186...
ABC-ECS (>=0.1.4 <=0.2.1), ABC_Game_Engine (>=0.1.0 <=0.1.2) +29852 more potentially affected by CVE-2022-23639 via crossbeam-utils (>=0.1.0 <=0.8.21)
crossbeam-utils CARGO version =0.1.0, =0.1.4, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.8, =0.1.0, =0.0.0, =0.1.2, =0.1.0, =0.0.8, =0.1.0, =1.0.1 - GuiNistRs =0.1.0 - HPGO =0.9.2 and more Source cves: CVE-2022-23639 Source advisory: OSV:RUSTSEC-2022-0041...
PT-2021-21531 · Apache · Apache Traffic Server
Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 8.1.2 Apache Traffic Server versions 9.0.0 through 9.0.1 Description: The issue is related to improper input validation in the header parsing of Apache Traffic Server, allowing an attacker to smugg...
Fedora: Security Advisory for libjpeg-turbo (FEDORA-2021-359a715688)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...