Archive
February 2022
Vulnerabilities first published in this month (UTC), newest first.
1,963 results · Feed
-
Medium 6.3
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticat…
-
Medium 6.1
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.…
-
High 8.8
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb versi…
-
High 7.8
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiExtender version…
-
Medium 4.2
An improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.…
-
High 8.1
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb ma…
-
Unscored —
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user inpu…
-
Unscored —
In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.
-
High 8.4
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 8.2.
-
Unscored —
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code ex…
-
Unscored —
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.
-
Unscored —
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.
-
Unscored —
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.
-
Unscored —
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.
-
Unscored —
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.
-
Unscored —CVE-2022-24218 EPSS 17%
An issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.
-
Unscored —
eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.
-
Unscored —CVE-2021-38560 Public exploit
Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in…
-
Unscored —
UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Ma…
-
Medium 6.5CVE-2021-44451 Scanner template
API sensitive information leak
Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgrade to Apache Superset 1.4.0 or higher.
-
Unscored —CVE-2021-43510 Scanner template
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in logi…
-
Unscored —
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-s…
-
Unscored —
A cross-site scripting (XSS) vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execut…
-
Medium —CVE-2021-45416 Public exploit
RosarioSIS XSS Vulnerability
Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the search_term parameter in the modules/Scheduling/Courses.php script.
-
Medium 6.5
Pulsar Admin API allows access to data from other tenants using getMessageById API
In Apache Pulsar it is possible to access data from BookKeeper that does not belong to the topics accessible by the authenticated user. The Admin API get-message-by-id requires the user to input a topic and a ledger id. The ledger id is a pointer to the data,…
-
Critical 9.4
Path Traversal in yuda-lyu/w-zip
Path Traversal in NPM w-zip prior to 1.0.12.
-
Unscored —
Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI
The Essential Addons for Elementor WordPress plugin before 5.0.5 does not validate and sanitise some template data before it them in include statements, which could allow unauthenticated attackers to perform Local File Inclusion attack and read arbitrary file…
-
Unscored —CVE-2022-0220 Scanner template
WordPress GDPR & CCPA < 1.9.27 - Unauthenticated Reflected Cross-Site Scripting
The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin before 1.9.27, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML payload isn't properly es…
-
Unscored —
Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion
The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request
-
Unscored —
Link Library < 7.2.8 - Library Settings Reset via CSRF
The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack
-
Unscored —
Link Library < 7.2.9 - Reflected Cross-Site Scripting
The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
-
Unscored —
UpdraftPlus < 1.16.69 - Reflected Cross-Site Scripting
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting
-
Unscored —CVE-2021-25085 Scanner template
WOOF - Products Filter for WooCommerce < 1.2.6.3 - Reflected Cross-Site Scripting
The WOOF WordPress plugin before 1.2.6.3 does not sanitise and escape the woof_redraw_elements before outputing back in an admin page, leading to a Reflected Cross-Site Scripting
-
Unscored —
NextScripts: Social Networks Auto-Poster < 4.3.25 - Arbitrary Post Deletion via CSRF
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.25 does not have CSRF check in place when deleting items, allowing attacker to make a logged in admin delete arbitrary posts via a CSRF attack
-
Unscored —CVE-2021-25063 Scanner template
Contact Form 7 Skins < 2.5.1 - Reflected Cross-Site Scripting (XSS)
The Skins for Contact Form 7 WordPress plugin before 2.5.1 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
-
Unscored —
Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting via AJAX Action
The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not sanitise and escape POSted parameters sent to the wpassetcleanup_fetch_active_plugins_icons AJAX action (available to admin users), leading to a Reflected Cross-Site Scripting issue
-
Unscored —
NextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSS
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue
-
Unscored —
Custom Dashboard & Login Page < 7.0 - Admin+ Stored Cross-Site Scripting
The Custom Dashboard & Login Page WordPress plugin before 7.0 does not sanitise some of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting
The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not escape the wpacu_selected_sub_tab_area parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting issue
-
Unscored —CVE-2021-24934 Scanner template
Visual CSS Style Editor < 7.5.4 - Reflected Cross-Site Scripting
The Visual CSS Style Editor WordPress plugin before 7.5.4 does not sanitise and escape the wyp_page_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue