Skip to content
OpenAdvisories

Archive

27 January 2022

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 4.3

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.

  • Medium 5.3

    Information Leakege via Unauthorized Access in Single Connect

    Single Connect does not perform an authorization check when using the "sc-diagnostic-ui" module. A remote attacker could exploit this vulnerability to access the device information page. The exploitation of this vulnerability might allow a remote attacker to …

  • Medium 5.3

    Modifying User Permissions via Unauthorized Access in Single Connect

    Single Connect does not perform an authorization check when using the "sc-assigned-credential-ui" module. A remote attacker could exploit this vulnerability to modify users permissions. The exploitation of this vulnerability might allow a remote attacker to d…

  • Medium 5.3

    Information Leakege via Unauthorized Access in Single Connect

    Single Connect does not perform an authorization check when using the "log-monitor" module. A remote attacker could exploit this vulnerability to access the logging interface. The exploitation of this vulnerability might allow a remote attacker to obtain sens…

  • Medium 6.3

    Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

    Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.