Archive
7 February 2022
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Medium 6.5
Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in wor…
-
Critical 9.9
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sendin…
-
Medium 4.7
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Manageme…
-
Medium 4.7
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…
-
Medium 4.7
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…
-
Medium 5.3
Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager …
-
Medium 6.1
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of i…
-
Medium 6.1
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insuffici…
-
High 7.5
Cookie and header exposure in twisted
twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the `twited.web.RedirectAgent` and `twisted.web. BrowserLike…
-
Unscored —
IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Ban
The IP2Location Country Blocker WordPress plugin before 2.26.5 does not have authorisation and CSRF checks in the ip2location_country_blocker_save_rules AJAX action, allowing any authenticated users, such as subscriber to call it and block arbitrary country, …