Archive
1 June 2021
Vulnerabilities first published on this day (UTC), newest first.
79 results · Feed
-
High 8.8
Access control flaw in Kiali
An incorrect access control flaw was found in the kiali-operator in versions before 1.33.0 and before 1.24.7. This flaw allows an attacker with a basic level of access to the cluster (to deploy a kiali operand) to use this vulnerability and deploy a given ima…
-
Unscored —
A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closu…
-
Unscored —
A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email all…
-
Unscored —
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from …
-
Unscored —
The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with …
-
Unscored —
The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which c…
-
Unscored —
The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt fi…
-
Unscored —
Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are u…
-
High 7.5
Regular expression denial of service in react-native
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
-
Unscored —
Instant Images WordPress Plugin < 4.4.0.1 - Authenticated Stored XSS & XFS
The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/upload.php?page=instant-images), only validating them client s…
-
Unscored —
Funnel Builder by CartFlows < 1.6.13 - Authenticated Stored XSS via FB Pixel ID and Google Analytics ID
The Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPress plugin before 1.6.13 did not sanitise its facebook_pixel_id and google_analytics_id settings, allowing high privilege users to set XSS payload in them, which will either be e…
-
Unscored —
Database Backup for WordPress < 2.4 - Authenticated Persistent Cross-Site Scripting (XSS)
The Database Backup for WordPress plugin before 2.4 did not escape the backup_recipient POST parameter in before output it back in the attribute of an HTML tag, leading to a Stored Cross-Site Scripting issue.
-
Unscored —
WP Login Security and History <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)
The WP Login Security and History WordPress plugin through 1.0 did not have CSRF check when saving its settings, not any sanitisation or validation on them. This could allow attackers to make logged in administrators change the plugin's settings to arbitrary …
-
Unscored —
Smooth Scroll Page Up/Down Buttons < 1.4 - Authenticated Stored XSS
The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psb_distance, psb_buttonsize, psb_speed, only validating them client side. This could allow high privilege users (such as admin) to…
-
Unscored —CVE-2021-24335 Scanner template
Car Repair Services < 4.0 - Unauthenticated Reflected XSS & XFS
The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue
-
Unscored —
WP Super Cache < 1.7.3 - Authenticated Stored Cross-Site Scripting (XSS)
The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wp_cache_location parameter in its settings, which could lead to a Stored Cross-Site Scripting issue.
-
Unscored —
Content Copy Protection & Prevent Image Save <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)
The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers to make a logged in administrator set arbitrary XSS payload…
-
Unscored —CVE-2021-24316 Scanner template
Mediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter before output it back the page, leading to the Cross-SIte Scripting issue.
-
Unscored —
Listeo < 1.6.11 - Multiple XSS & XFS vulnerabilities
The Listeo WordPress theme before 1.6.11 did not properly sanitise some parameters in its Search, Booking Confirmation and Personal Message pages, leading to Cross-Site Scripting issues
-
Unscored —
WP Super Cache < 1.7.3 - Authenticated Remote Code Execution
The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they allow input of '$' and '\n'. This is d…
-
Unscored —
Bello < 1.6.0 - Authenticated Cross-Site Scripting (XSS) and XFS
The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise its post_excerpt parameter before outputting it back in the shop/my-account/bello-listing-endpoint/ page, leading to a Cross-Site Scripting issue
-
Unscored —
WP Prayer < 1.6.2 - Authenticated Stored Cross-Site Scripting (XSS)
The WP Prayer WordPress plugin before 1.6.2 provides the functionality to store requested prayers/praises and list them on a WordPress website. These stored prayer/praise requests can be listed by using the WP Prayer engine. An authenticated WordPress user wi…
-
Unscored —
Listeo < 1.6.11 - Multiple Authenticated IDOR Vulnerabilities
The Listeo WordPress theme before 1.6.11 did not ensure that the Post/Page and Booking to delete belong to the user making the request, allowing any authenticated users to delete arbitrary page/post and booking via an IDOR vector.
-
Unscored —CVE-2021-24321 EPSS 67%
Bello < 1.6.0 - Unauthenticated Blind SQL Injection
The Bello - Directory & Listing WordPress theme before 1.6.0 did not sanitise the bt_bb_listing_field_price_range_to, bt_bb_listing_field_now_open, bt_bb_listing_field_my_lng, listing_list_view and bt_bb_listing_field_my_lat parameters before using them in a …
-
Unscored —
Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS
The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise and escape its listing_list_view, bt_bb_listing_field_my_lat, bt_bb_listing_field_my_lng, bt_bb_listing_field_distance_value, bt_bb_listing_field_my_lat_default, bt_bb_list…
-
Unscored —
Photo Gallery < 1.5.67 - Authenticated Stored Cross-Site Scripting via Gallery Title
The Photo Gallery by 10Web - Mobile-Friendly Image Gallery WordPress plugin before 1.5.67 did not properly sanitise the gallery title, allowing high privilege users to create one with XSS payload in it, which will be triggered when another user will view the …
-
Unscored —
External Media < 1.0.34 - Authenticated Arbitrary File Upload
The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users.
-
Unscored —
Weekly Schedule < 3.4.3 - Authenticated Stored XSS
The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue
-
Unscored —
SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the …
-
Unscored —
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundatio…
-
Medium 6.6
Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allow…
-
Medium 5.0
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in…
-
High 7.7
Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.1…
-
High 7.9
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability container volume managemen…
-
High 7.8
Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation…
-
High 8.8
Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station be…
-
High 7.3
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in cgi component in …
-
Unscored —
A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. Whil…
-
High 7.5
Out of bounds read in json-smart
A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.