排序
CVE-2022-22965: Spring – Remote Code Execution
漏洞标题 CVE-2022-22965: Spring - Remote Code Execution 漏洞描述 Spring MVC and Spring WebFlux applications running on Java Development Kit 9+ are susceptible to remote code execut...
2022年6月16日 12:45CVE-2022-32430: Lin CMS Spring Boot – Default JWT Token
漏洞标题 CVE-2022-32430: Lin CMS Spring Boot - Default JWT Token 漏洞描述 An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information a...
2022年4月3日 01:00CVE-2022-22947: Spring Cloud Gateway Code Injection
漏洞标题 CVE-2022-22947: Spring Cloud Gateway Code Injection 漏洞描述 Applications using Spring Cloud Gateway prior to 3.1.1+ and 3.0.7+ are vulnerable to a code injection attack w...
2022年11月15日 10:44CVE-2022-22963: Spring Cloud – Remote Code Execution
漏洞标题 CVE-2022-22963: Spring Cloud - Remote Code Execution 漏洞描述 Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions are susceptible to remote code exe...
2022年11月26日 09:18CVE-2022-22965: Spring – Remote Code Execution
漏洞标题 CVE-2022-22965: Spring - Remote Code Execution 漏洞描述 Spring MVC and Spring WebFlux applications running on Java Development Kit 9+ are susceptible to remote code execut...
2022年7月28日 19:57CVE-2022-27228: Bitrix Site Manager – Remote Code Execution
漏洞标题 CVE-2022-27228: Bitrix Site Manager - Remote Code Execution 漏洞描述 In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote una...
2022年8月12日 21:28CVE-2022-38467: CRM Perks Forms < 1.1.1 - Cross Site Scripting
漏洞标题 CVE-2022-38467: CRM Perks Forms < 1.1.1 - Cross Site Scripting 漏洞描述 The plugin does not sanitise and escape some parameters from a sample file before outputting the...
2022年5月24日 10:08CVE-2022-29005: Online Birth Certificate System 1.2 – Stored Cross-Site Scripting
漏洞标题 CVE-2022-29005: Online Birth Certificate System 1.2 - Stored Cross-Site Scripting 漏洞描述 Online Birth Certificate System 1.2 contains multiple stored cross-site scriptin...
2022年7月14日 02:51CVE-2022-24990: TerraMaster TOS < 4.2.30 Server Information Disclosure
漏洞标题 CVE-2022-24990: TerraMaster TOS < 4.2.30 Server Information Disclosure 漏洞描述 TerraMaster NAS devices running TOS prior to version 4.2.30 are vulnerable to informatio...
2022年9月14日 22:12CVE-2022-24990: TerraMaster TOS < 4.2.30 Server Information Disclosure
漏洞标题 CVE-2022-24990: TerraMaster TOS < 4.2.30 Server Information Disclosure 漏洞描述 TerraMaster NAS devices running TOS prior to version 4.2.30 are vulnerable to informatio...
2022年6月30日 20:16CVE-2022-0873: WordPress Gmedia Photo Gallery Plugin < 1.20.0 - Cross-Site Scripting
漏洞标题 CVE-2022-0873: WordPress Gmedia Photo Gallery Plugin < 1.20.0 - Cross-Site Scripting 漏洞描述 The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise ...
2022年5月3日 20:00CVE-2022-24181: PKP Open Journal Systems 2.4.8-3.3 – Cross-Site Scripting
漏洞标题 CVE-2022-24181: PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting 漏洞描述 PKP Open Journal Systems 2.4.8 to 3.3 contains a cross-site scripting vulnerability whic...
2022年7月28日 08:06CVE-2022-40032: Simple Task Managing System v1.0 – SQL Injection
漏洞标题 CVE-2022-40032: Simple Task Managing System v1.0 - SQL Injection 漏洞描述 SQL injection occurs when a web application doesn't properly validate or sanitize user input...
2022年11月6日 15:51CVE-2022-41412: perfSONAR 4.x <= 4.4.4 - Server-Side Request Forgery
漏洞标题 CVE-2022-41412: perfSONAR 4.x <= 4.4.4 - Server-Side Request Forgery 漏洞描述 An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to ...
2022年1月20日 00:46CVE-2022-0437: karma-runner DOM-based Cross-Site Scripting
漏洞标题 CVE-2022-0437: karma-runner DOM-based Cross-Site Scripting 漏洞描述 NPM karma prior to 6.3.14. contains a DOM-based cross-site Scripting vulnerability. PoC代码
2022年4月27日 13:46CVE-2022-38817: Dapr Dashboard 0.1.0-0.10.0 – Improper Access Control
漏洞标题 CVE-2022-38817: Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control 漏洞描述 Dapr Dashboard 0.1.0 through 0.10.0 is susceptible to improper access control. An attacker c...
2022年5月10日 13:18
