Archive
February 2022
Vulnerabilities first published in this month (UTC), newest first.
1,963 results · Feed
-
Unscored —
SupportCandy < 2.2.7 - Contributor+ Stored Cross-Site Scripting
The SupportCandy WordPress plugin before 2.2.7 does not validate and escape the page attribute of its shortcode, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks
-
Unscored —
SupportCandy < 2.2.7 - CSRF to Cross-Site Scripting
The SupportCandy WordPress plugin before 2.2.7 does not have CSRF check in the wpsc_tickets AJAX action, nor has any sanitisation or escaping in some of the filter fields which could allow attackers to make a logged in user having access to the ticket lists d…
-
Unscored —
SupportCandy < 2.2.7 - Arbitrary Ticket Deletion via CSRF
The SupportCandy WordPress plugin before 2.2.7 does not have CRSF check in its wpsc_tickets AJAX action, which could allow attackers to make a logged in admin call it and delete arbitrary tickets via the set_delete_permanently_bulk_ticket setting_action.
-
Unscored —CVE-2021-24878 Scanner template
SupportCandy < 2.2.7 - Reflected Cross-Site Scripting
The SupportCandy WordPress plugin before 2.2.7 does not sanitise and escape the query string before outputting it back in pages with the [wpsc_create_ticket] shortcode embed, leading to a Reflected Cross-Site Scripting issue
-
Unscored —
SupportCandy < 2.2.5 - Unauthenticated Arbitrary Ticket Deletion
The SupportCandy WordPress plugin before 2.2.5 does not have authorisation and CSRF checks in its wpsc_tickets AJAX action, which could allow unauthenticated users to call it and delete arbitrary tickets via the set_delete_permanently_bulk_ticket setting_acti…
-
Unscored —
IIPImage High Resolution Streaming Image Server prior to commit 882925b295a80ec992063deffc2a3b0d803c3195 is affected by…
-
Unscored —
FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed success…
-
Unscored —
XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application …
-
Low 2.4
Disclosure of mail addresses
Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 an…
-
Low 3.8
Dynamic field error message is vulnerable to XSS
OTRS administrators can configure dynamic field and inject malicious JavaScript code in the error message of the regular expression check. When used in the agent interface, malicious code might be exectued in the browser. This issue affects: OTRS AG OTRS 7.0.…
-
Unscored —
In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server…
-
Medium 6.5
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service managem…
-
Medium 6.5
Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in wor…
-
Critical 9.9
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sendin…
-
Medium 4.7
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Manageme…
-
Medium 4.7
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…
-
Medium 4.7
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…
-
Medium 5.3
Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager …
-
Medium 6.1
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of i…
-
Medium 6.1
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insuffici…
-
High 7.5
Cookie and header exposure in twisted
twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the `twited.web.RedirectAgent` and `twisted.web. BrowserLike…
-
Unscored —
IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Ban
The IP2Location Country Blocker WordPress plugin before 2.26.5 does not have authorisation and CSRF checks in the ip2location_country_blocker_save_rules AJAX action, allowing any authenticated users, such as subscriber to call it and block arbitrary country, …
-
Unscored —
An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request.
-
Unscored —
An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/…
-
Unscored —
An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Aut…
-
Unscored —
Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affec…
-
Unscored —
A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operation(s) to exhaust th…
-
Unscored —
A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on e…
-
Unscored —
A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old …
-
Unscored —
A flaw was found in the REST API in StarWind Stack. REST command, which manipulates a virtual disk, doesn’t check input…
-
High 7.5
Server-Side Request Forgery in Traffic Ops endpoint POST /user/login/oauth
In Apache Traffic Control Traffic Ops prior to 6.1.0 or 5.1.6, an unprivileged user who can reach Traffic Ops over HTTPS can send a specially-crafted POST request to /user/login/oauth to scan a port of a server that Traffic Ops can reach.
-
Medium 6.5
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
-
Critical 9.8
Buffer overrun in CGI.escape_html
CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 …
-
Unscored —
perM 0.4.0 has a Buffer Overflow related to strncpy. (Debian initially fixed this in 0.4.0-7.)
-
High 8.6
Cross-site Scripting (XSS) - Reflected in ptrofimov/beanstalk_console
Cross-site Scripting (XSS) - Reflected in Packagist ptrofimov/beanstalk_console prior to 1.7.12.
-
Medium 5.4
Cross-site Scripting (XSS) - DOM in karma-runner/karma
Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.
-
Medium 5.4
Denial of Service and Data Integrity vulnerability in features command
An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases coul…
-
Medium 5.3
IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID…
-
Unscored —
The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an …
-
Unscored —
Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network ke…