459 matches found
CVE-2021-44170
A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...
CVE-2021-44170
A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...
PT-2022-3806
Name of the Vulnerable Software and Affected Versions Redis versions 7.0.0 through 7.0.3 Description The issue is related to a heap overflow that can potentially lead to remote code execution. This occurs when a specially crafted XAUTOCLAIM command is executed on a stream key in a specific state...
CVE-2022-30467
creationtimestamp| type| source ---|---|--- 2022-06-30 00:37:47+00:00| seen| https://t.me/cibsecurity/45384...
CVE-2022-32559
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics...
CVE-2022-32561
An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insufficient when it was discovered that diagnostic endpoints could still be accessed from the network...
Couchbase Server 安全漏洞
Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server versions prior to 7.0.4. No information about this vulnerability is...
CVE-2022-32193
Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor...
PT-2022-21372 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.0.4 Description: An issue was discovered in Couchbase Server where XDCR lacks role checking when changing internal settings. Recommendations: For versions prior to 7.0.4, update to version 7.0.4 or later t...
Couchbase Server 安全漏洞
Couchbase Server is a distributed NoSQL non-relational database from Couchbase USA, which primarily supports data query, full-text search, and active global replication. information disclosure vulnerability exists in versions of Couchbase Server prior to 7.0.4, which stems from the fact that samp...
Couchbase Server 安全漏洞
Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in versions of Couchbase Server prior to 7.0.4, which stems from the fact that...
fullpage.js 跨站脚本漏洞
fullpage.js is an easy-to-use library for creating full-screen scrolling websites also known as single-page websites or mono-page websites and adding horizontal sliders to various parts of the website. A cross-site scripting vulnerability exists in fullpage.js prior to 4.0.4. No information about...
CVE-2022-1179
Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
CVE-2022-27204
creationtimestamp| type| source ---|---|--- 2022-03-15 19:19:40+00:00| seen| https://t.me/cibsecurity/38946...
CVE-2022-21391
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Connection Manager. Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with network acces...
AZL-44112 CVE-2022-0155 affecting package js-jquery 3.5.0-4
follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...
CVE-2021-38950
IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective. IBM X-ForceID: 211404...
PYSEC-2021-380
Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...