Archive
6 December 2021
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
Critical 10.0
Distributed Data Systems WebHM
The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.
-
Unscored —
Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection
The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL sta…
-
Unscored —
WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header
The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user.
-
Unscored —CVE-2021-43471 Public exploit
In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can re…
-
Unscored —CVE-2021-43469 Public exploit
VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component.