21 February 2022

9 results · Clear filters · Feed

• Medium 4.7
  CVE-2021-26256

  WordPress Survey Maker plugin <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

  Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Survey Maker WordPress plugin (versions <= 2.0.6).

  Survey Maker team Survey Maker (WordPress plugin) Web / CMS
  Feb 21, 2022
• Medium 5.4
  CVE-2022-25599

  WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability

  Cross-Site Request Forgery (CSRF) vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin (versions <= 4.9.0).

  Spiffy Plugins Spiffy Calendar (WordPress plugin) Web / CMS
  Feb 21, 2022
• Medium 4.3
  CVE-2022-23983

  WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerability

  Cross-Site Request Forgery (CSRF) vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress plugin (versions <= 3.4.4).

  wp-buy WP Content Copy Protection & No Right Click (WordPress plugin) Web / CMS
  Feb 21, 2022
• Medium 4.3
  CVE-2022-0708

  Team Creator's Email Address is disclosed to Team Members via one of the APIs

  Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allows authenticated team members to access this information resulting in sensitive & private information disclosure.

  Mattermost Mattermost
  Feb 21, 2022
• Medium 4.7
  CVE-2022-0692 Scanner template

  Open Redirect on Rudloff/alltube in rudloff/alltube

  Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1.

  Rudloff rudloff/alltube rudloff/alltube Packagist
  Feb 21, 2022
• Medium 5.3
  CVE-2022-0564

  Qlik Sense Enterprise Domain User enumeration

  A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerability by sending authentication requests to an affected system. A successful exploit could allow the a…

  Qlik Sense Qlik Sense Enterprise on Windows Windows
  Feb 21, 2022
• Medium 5.5
  CVE-2022-0563

  A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library us…

  util-linux util-linux util-linux Linux Debian Azure Linux Alpine
  Feb 21, 2022
• Medium 6.5
  CVE-2022-0691

  Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

  Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.

  unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm
  Feb 21, 2022
• Medium 6.2
  CVE-2022-0696

  NULL Pointer Dereference in vim/vim

  NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.

  vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  Feb 21, 2022