Results
9,682 of 25,043· Page 71/194Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF).
An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin.
EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery (CSRF) via the background, column management functio
XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF).
StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe. An attacker can execute ar
In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.
Use After Free in GitHub repository vim/vim prior to 9.0.0225.
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build informati
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Te
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload functi
Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions.
Improper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privile
Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged
Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged u
Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileg
Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged u
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer.
The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protoco
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at
Insufficiently protected credentials in the Intel(R) Datacenter Group Event iOS application, all versions, may allow an
The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.6 contain
Uncontrolled search path in the Intel(R) Distribution for Python before version 2022.0.3 may allow an authenticated user
Insufficiently protected credentials in the installation binaries for Intel(R) SEAPI in all versions may allow an authen
Uncontrolled search path in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to
Incorrect default permissions in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated us
Improper access control in the Intel(R) DSA software for before version 22.2.14 may allow an authenticated user to poten
Uncontrolled search path element in the Intel(R) Enpirion(R) Digital Power Configurator GUI software, all versions may a
Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenti
Uncontrolled search path elements in the Intel(R) Datacenter Group Event Android application, all versions, may allow an
Improper access control in the Intel(R) Data Center Manager software before version 4.1 may allow an unauthenticated use
Improper access control in the Intel(R) HAXM software before version 7.7.1 may allow an authenticated user to potentiall
Uncontrolled search path elements in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authe
Improper buffer restrictions for some Intel(R) NUC 9 Extreme Laptop Kit drivers before version 2.2.0.22 may allow an aut
Improper neutralization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user
Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potential
Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged use
Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potent
Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenti
Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to pote
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user
Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products be
Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially ena
Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user
Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before versi
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and
A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one
The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using
All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability
FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an impro
Test your stack for 2022issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.