Archive
November 2021
Vulnerabilities first published in this month (UTC), newest first.
1,522 results · Feed
-
Unscored —
ImageBoss < 3.0.6 - Admin+ Stored Cross-Site Scripting
The ImageBoss WordPress plugin before 3.0.6 does not sanitise and escape its Source Name setting, which could allow high privilege users to perform Cross-Site Scripting attacks
-
Unscored —
Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site Scripting
The Slideshow Gallery WordPress plugin before 1.7.4 does not sanitise and escape the Slide "Title", "Description", and Gallery "Title" fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disa…
-
Unscored —
MainWP Child < 4.1.8 - Admin+ SQL Injection
The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule…
-
Unscored —CVE-2021-24875 Scanner template
eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting
The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not escape the ic-settings-search parameter before outputting it back in the page in an attribute, leading to a Reflected Cross-Site Scripting issue
-
Unscored —
Tutor LMS < 1.9.11 - Reflected Cross-Site Scripting
The Tutor LMS WordPress plugin before 1.9.11 does not sanitise and escape user input before outputting back in attributes in the Student Registration page, leading to a Reflected Cross-Site Scripting issue
-
Unscored —
Advanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site Scripting
The Advanced Access Manager WordPress plugin before 6.8.0 does not escape some of its settings when outputting them, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
-
Unscored —
BetterLinks < 1.2.6 - Admin+ Stored Cross-Site Scripting
The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV.
-
Unscored —
Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scripting
The Logo Showcase with Slick Slider WordPress plugin before 1.2.4 does not sanitise the Grid Settings, which could allow users with a role as low as Author to perform stored Cross-Site Scripting attacks via post metadata of Grid logo showcase.
-
Unscored —
Video Lessons Manager - Admin+ Stored Cross-Site Scripting
The Video Lessons Manager WordPress plugin before 1.7.2 and Video Lessons Manager Pro WordPress plugin before 3.5.9 do not properly sanitize and escape values when updating their settings, which could allow high privilege users to perform Cross-Site Scripting…
-
Unscored —
Download Plugin < 1.6.1 - Subscriber+ Arbitrary Plugin Activation
The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwap_plugin_activate AJAX action, allowing any authenticated users, such as subscribers, to activate plugins that are already installed.
-
Unscored —
Forminator < 1.15.4 - Admin+ Stored Cross-Site Scripting
The Forminator WordPress plugin before 1.15.4 does not sanitize and escape the email field label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
-
Unscored —
MAZ Loader < 1.4.1 - Arbitrary Loader Deletion via CSRF
The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack
-
Unscored —CVE-2021-24644 Scanner template
Images to WebP < 1.9 - Authenticated Local File Inclusion
The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include() function, which could lead to a Local File Inclusion issue
-
Unscored —
Images to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion
-
Low 2.7
IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a r…
-
Medium 5.9
IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allo…
-
Medium 5.9
IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remo…
-
Medium 6.5
IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an erro…
-
High 7.5
Path traversal in Matrix Synapse
Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is…
-
High 8.6
Arbitrary file reading vulnerability in Aim
Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of Aim prior to 3.1.0 are vulnerable to a path traversal attack. By manipulating variables that reference files with “dot-dot-slash (../)” sequences and its variations or b…
-
High 7.8
Adobe Creative Cloud Incorrect Permission Assignment Privilege Escalation Vulnerability
Adobe Creative Cloud version 5.5 (and earlier) are affected by a privilege escalation vulnerability in the resources leveraged by the Setup.exe service. An unauthenticated attacker could leverage this vulnerability to remove files and escalate privileges unde…
-
Unscored —
A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to H…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vuln…
-
Unscored —
There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful exp…
-
Unscored —
There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability …
-
Unscored —
There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability wil…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will…
-
Unscored —
There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cau…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability w…
-
Unscored —
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cau…