Archive
21 December 2021
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
Unscored —
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system t…
-
Unscored —
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system t…
-
Unscored —
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP …
-
Medium 6.1
PrestaShop XSS Vulnerability
PrestaShop before 1.5.2 allows XSS via the "<object data='data:text/html" substring in the message field.
-
Unscored —
Stormshield Endpoint Security before 2.1.2 allows remote code execution.
-
Unscored —
Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control.
-
Unscored —
Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control.
-
Medium 6.6
Cross-site Scripting (XSS) - Stored in pimcore/pimcore
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
-
Unscored —
The email parameter from ajax.php of Video Sharing Website 1.0 appears to be vulnerable to SQL injection attacks. A pay…
-
Unscored —
The id parameter in view_storage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL inj…
-
Unscored —
Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three application…
-
Unscored —
Directorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload
The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory.
-
Unscored —
Blog2Social < 6.8.7 - Reflected Cross-Site Scripting
The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.8.7 does not sanitise and escape the b2sShowByDate parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue
-
Unscored —
Icegram < 2.0.5 - Reflected Cross-Site Scripting
The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.0.5 does not sanitise and escape the message_id parameter of the get_message_action_row AJAX action before outputting it back in an attribute, leading to a reflected Cross-Si…
-
Unscored —
Everest Forms < 1.8.0 - Reflected Cross-Site Scripting
The Contact Form, Drag and Drop Form Builder for WordPress plugin before 1.8.0 does not escape the status parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue
-
Unscored —
WCFM - WooCommerce Multivendor Marketplace < 3.4.12 - Unauthenticated SQL Injection
The wcfm_ajax_controller AJAX action of the WCFM Marketplace WordPress plugin before 3.4.12, available to unauthenticated and authenticated user, does not properly sanitise multiple parameters before using them in SQL statements, leading to SQL injections
-
Unscored —
Ni WooCommerce Custom Order Status < 1.9.7 - Subscriber+ SQL Injection
The get_query() function of the Ni WooCommerce Custom Order Status WordPress plugin before 1.9.7, used by the niwoocos_ajax AJAX action, available to all authenticated users, does not properly sanitise the sort parameter before using it in a SQL statement, le…
-
Unscored —
WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection
The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform …
-
Unscored —
Logo Carousel < 3.4.2 - Unauthorised Private Post Access
The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other users via the Carousel Duplication feature
-
Unscored —
Logo Carousel < 3.4.2 - Contributor+ Stored Cross-Site Scripting
The Logo Carousel WordPress plugin before 3.4.2 does not validate and escape the "Logo Margin" carousel option, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks
-
Unscored —
SportsPress < 2.7.9 - Reflected Cross-Site Scripting
The SportsPress WordPress plugin before 2.7.9 does not sanitise and escape its match_day parameter before outputting back in the Events backend page, leading to a Reflected Cross-Site Scripting issue
-
Unscored —
An infinite loop vulnerability exists in Gpac 1.0.1 in gf_get_bit_size.
-
Unscored —
In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or or…
-
Unscored —
The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address de…
-
Unscored —
In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffe…
-
Unscored —
The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address …