Archive
23 November 2021
Vulnerabilities first published on this day (UTC), newest first.
89 results · Feed
-
Unscored —
Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scripting
The Logo Showcase with Slick Slider WordPress plugin before 1.2.4 does not sanitise the Grid Settings, which could allow users with a role as low as Author to perform stored Cross-Site Scripting attacks via post metadata of Grid logo showcase.
-
Unscored —
Video Lessons Manager - Admin+ Stored Cross-Site Scripting
The Video Lessons Manager WordPress plugin before 1.7.2 and Video Lessons Manager Pro WordPress plugin before 3.5.9 do not properly sanitize and escape values when updating their settings, which could allow high privilege users to perform Cross-Site Scripting…
-
Unscored —
Download Plugin < 1.6.1 - Subscriber+ Arbitrary Plugin Activation
The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwap_plugin_activate AJAX action, allowing any authenticated users, such as subscribers, to activate plugins that are already installed.
-
Unscored —
Forminator < 1.15.4 - Admin+ Stored Cross-Site Scripting
The Forminator WordPress plugin before 1.15.4 does not sanitize and escape the email field label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
-
Unscored —
MAZ Loader < 1.4.1 - Arbitrary Loader Deletion via CSRF
The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack
-
Unscored —CVE-2021-24644 Scanner template
Images to WebP < 1.9 - Authenticated Local File Inclusion
The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include() function, which could lead to a Local File Inclusion issue
-
Unscored —
Images to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion
-
Low 2.7
IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a r…
-
Medium 5.9
IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allo…
-
Medium 5.9
IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remo…
-
Medium 6.5
IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an erro…
-
High 7.5
Path traversal in Matrix Synapse
Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is…
-
High 8.6
Arbitrary file reading vulnerability in Aim
Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of Aim prior to 3.1.0 are vulnerable to a path traversal attack. By manipulating variables that reference files with “dot-dot-slash (../)” sequences and its variations or b…
-
High 7.8
Adobe Creative Cloud Incorrect Permission Assignment Privilege Escalation Vulnerability
Adobe Creative Cloud version 5.5 (and earlier) are affected by a privilege escalation vulnerability in the resources leveraged by the Setup.exe service. An unauthenticated attacker could leverage this vulnerability to remove files and escalate privileges unde…
-
Unscored —
A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to H…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vuln…
-
Unscored —
There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful exp…
-
Unscored —
There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability …
-
Unscored —
There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability wil…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will…
-
Unscored —
There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cau…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cau…
-
Unscored —
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cau…
-
Unscored —
There is a Configuration vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause th…
-
Unscored —
There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the a…
-
Unscored —
There is an Unstandardized field names in Huawei Smartphone.Successful exploitation of this vulnerability may affect se…
-
Unscored —
There is an Injection attack vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affec…
-
Unscored —
There is a Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Digital Ba…
-
Unscored —
There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the a…