Archive
3 January 2022
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Medium 6.1
UpdraftPlus < 1.16.66 - Reflected Cross-Site Scripting
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backup_timestamp and job_id parameter before outputting then back in admin pages, leading to Reflected Cross-Site Scripting issues
-
Medium 6.1
LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS
The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud servers, allowing attackers to make requests to certain endpoints by using a specific X-Forwarded-For header value. In addition, one of the end…
-
Medium 6.5
Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denia…
-
Medium 6.5
Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Com…
-
Medium 6.7
Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between…
-
Medium 6.5
Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IO…
-
Medium 5.3
Generation of Error Message Containing Sensitive Information in star7th/showdoc
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information