CVE-2022-0785
The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and escape the month parameter before using it in a SQL […]
İçeriği inceleyinNIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and escape the month parameter before using it in a SQL […]
İçeriği inceleyinThe Caldera Forms WordPress plugin before 1.9.7 does not validate and escape the cf-api parameter before outputting it back in the response, […]
İçeriği inceleyinThe Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name, which could allow high privilege users, such as […]
İçeriği inceleyinThe WP Downgrade WordPress plugin before 1.2.3 only perform client side validation of its “WordPress Target Version” settings, but does not sanitise […]
İçeriği inceleyinA heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri […]
İçeriği inceleyinA heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. Zafiyet ile ilgili Genel Bilgi, Etki ve […]
İçeriği inceleyinA use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the […]
İçeriği inceleyinHeap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library. Zafiyet […]
İçeriği inceleyinStack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library. […]
İçeriği inceleyinA flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. Zafiyet ile ilgili Genel Bilgi, Etki […]
İçeriği inceleyinThere is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code […]
İçeriği inceleyinA flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being […]
İçeriği inceleyin