Archive
4 October 2021
Vulnerabilities first published on this day (UTC), newest first.
96 results · Feed
-
Medium 4.3
Stripe for WooCommerce 3.0.0 - 3.3.9 Missing Authorization Controls to Financial Account Hijacking
The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure their account to use other site users uni…
-
Unscored —
Cross site scripting vulnerability in 53KF < 2.0.0.2 that allows for arbitrary code to be executed via crafted HTML sta…
-
Unscored —
Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.
-
Unscored —
Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected ampli…
-
Medium 5.4
WordPress Media File Renamer – Auto & Manual Rename plugin <= 5.1.9 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in WordPress Media File Renamer – Auto & Manual Rename plugin (versions <= 5.1.9). Affected parameters "post_title", "filename", "lock". This allows changing the uploaded media title, media file name, and media …
-
Medium 4.3
In all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious user may create a project…
-
Unscored —
Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.
-
Medium 4.3
A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in depen…
-
Medium 4.3
In all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored when using git comman…
-
Medium 4.3
Improper authorization checks in all versions of GitLab EE starting from 13.11 before 14.1.7, all versions starting fro…
-
Unscored —
SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially in…
-
Medium 4.3
In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import…
-
Unscored —
ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.
-
Low 2.9
In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s passwo…
-
Unscored —
SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially in…
-
Low 2.0
Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in …
-
Low 3.8
In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersona…
-
Medium 4.3
In all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be leveraged by attackers to t…
-
Low 2.2
Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim'…
-
High 7.7
A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resou…
-
Unscored —CVE-2021-35296 Public exploit
An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via …
-
High 8.7
A Stored XSS in merge request creation page in all versions of Gitlab EE starting from 13.7 before 14.1.7, all versions…
-
Unscored —
In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquo…
-
Medium 5.4
Stored Cross-Site Scripting (XSS) in Calibre-web via Description Field in Metadata
In “Calibre-web” application, v0.6.0 to v0.6.12, are vulnerable to Stored XSS in “Metadata”. An attacker that has access to edit the metadata information, can inject JavaScript payload in the description field. When a victim tries to open the file, XSS will b…
-
Medium —
Information disclosure vulnerability in OnionShare
An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature.
-
Unscored —
The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not…
-
Unscored —
A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that…
-
Critical 9.8
Remote unauthenticated attackers able to upload files in Onionshare
OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality.
-
Unscored —
A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, pas…
-
Unscored —
Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visi…
-
Unscored —
Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.o…
-
Unscored —
Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the Verifications page, after upl…
-
Unscored —
Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS). The Avatar upload in the My Profil…
-
High 7.8
XMP Toolkit SDK Buffer Overflow Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-cra…
-
Unscored —CVE-2021-41511 Public exploit
The username and password field of login in Lodging Reservation Management System V1 can give access to any user by usi…
-
Unscored —
A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enabl…
-
Unscored —
Modern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site Scripting
The Modern Events Calendar Lite WordPress plugin before 5.22.2 does not escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallo…
-
Unscored —
Bitcoin / AltCoin Payment Gateway for WooCommerce < 1.6.1 - Reflected Cross-Site Scripting
The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue
-
Unscored —
CM Tooltip Glossary < 3.9.21 - Contributor+ Stored Cross-Site Scripting
The CM Tooltip Glossary WordPress plugin before 3.9.21 does not escape some glossary_tooltip shortcode attributes, which could allow users a role as low as Contributor to perform Stored Cross-Site Scripting attacks
-
Unscored —
Better Find and Replace < 1.2.9 - Reflected Cross-Site Scripting
The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue