Archive
9 May 2022
Vulnerabilities first published on this day (UTC), newest first.
45 results · Feed
-
Unscored —
Stored XSS in Add New Employee Form in Sourcecodester Employee Daily Task Management System 1.0 Allows Remote Attacker …
-
Unscored —
A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Ar…
-
Unscored —
A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allo…
-
Unscored —
Bonanza Wealth Management System (BWM) 7.3.2 allows SQL injection via the login form. Users who supply the application …
-
Unscored —
1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software run…
-
Unscored —CVE-2022-30524 Public exploit
There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mi…
-
High 8.8
Improper account password reset in Craft CMS
Craft CMS through 3.7.36 allows a remote unauthenticated attacker, who knows at least one valid username, to reset the account's password and take over the account by providing a crafted HTTP header to the application while using the password reset functional…
-
Unscored —CVE-2022-27412 Public exploit
Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request.
-
Unscored —CVE-2022-27308 Public exploit
A stored cross-site scripting (XSS) vulnerability in PHProjekt PhpSimplyGest v1.3.0 allows attackers to execute arbitra…
-
Unscored —
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshif…
-
Unscored —
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena …
-
Unscored —
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshif…
-
Unscored —
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena …
-
Unscored —
There is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls malloc,'img->width' and…
-
Unscored —
Easily Generate Rest API Url <= 1.0.0 - Admin+ Stored Cross-Site Scripting
The Easily Generate Rest API Url WordPress plugin through 1.0.0 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
-
Unscored —
Slide Anything < 2.3.44 - Editor+ Stored Cross-Site Scripting
The Slide Anything WordPress plugin before 2.3.44 does not sanitize and escape sliders' description, which could allow high privilege users such as editor and above to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
-
Unscored —
Vertical scroll recent post < 14.0 - Reflected Cross-Site Scripting
The Vertical scroll recent post WordPress plugin before 14.0 does not sanitise and escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting
-
Unscored —
Popup Maker < 1.16.5 - Admin+ Stored Cross-Site Scripting
The Popup Maker WordPress plugin before 1.16.5 does not sanitise and escape some of its Popup settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
-
Unscored —
Themify - Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site Scripting
The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability.
-
Unscored —CVE-2022-1013 Scanner template
Personal Dictionary < 1.3.4 - Unauthenticated SQLi
The Personal Dictionary WordPress plugin before 1.3.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to a blind SQL injection vulnerability.
-
Unscored —CVE-2022-0948 Scanner template
Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
The Order Listener for WooCommerce WordPress plugin before 3.2.2 does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection
-
Unscored —
IgniteUp <= 3.4.1 - Admin+ Stored Cross-Site Scripting
The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues
-
Unscored —
WP Social Buttons <= 2.1 - Admin+ Stored Cross-Site Scripting
The WP Social Buttons WordPress plugin through 2.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
SEMA API < 4.02 - Unauthenticated SQLi
The SEMA API WordPress plugin before 4.02 does not properly sanitise and escape some parameters before using them in SQL statements via an AJAX action, leading to SQL Injections exploitable by unauthenticated users
-
Unscored —CVE-2022-0826 Scanner template
WP Video Gallery <= 1.7.1 - Unauthenticated SQLi
The WP Video Gallery WordPress plugin through 1.7.1 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users
-
Unscored —
BadgeOS <= 3.7.0 - Unauthenticated SQLi
The BadgeOS WordPress plugin through 3.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users
-
Unscored —CVE-2022-0814 Scanner template
Ubigeo de Peru < 3.6.4 - Unauthenticated SQLi
The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injectio…
-
Unscored —
Admin Menu Editor <= 1.0.4 - Reflected Cross-Site Scripting
The Admin Menu Editor WordPress plugin through 1.0.4 does not sanitize and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
-
Unscored —
MapSVG < 6.2.20 - Unauthenticated SQLi
The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users.
-
Unscored —CVE-2022-0424 Scanner template
Popup by Supsystic < 1.10.9 - Unauthenticated Subscriber Email Addresses Disclosure
The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users
-
Medium 5.3
WP-GraphQL < 0.3.5 - Improper Access Control
The WPGraphQL WordPress plugin before 0.3.5 doesn't properly restrict access to information about other users' roles on the affected site. Because of this, a remote attacker could forge a GraphQL query to retrieve the account roles of every user on the site.
-
Low 3.7
IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web inte…
-
Medium 4.6
IBM Robotic Process Automation 21.0.1 could allow a register user on the system to physically delete a queue that could…
-
Medium 5.9
IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could …
-
Unscored —
An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could all…
-
Unscored —
Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text.
-
Unscored —
An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can perform …
-
Medium 6.8CVE-2022-1631 Public exploit
Users Account Pre-Takeover or Users Account Takeover. in microweber/microweber
Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, there is no email confirmation, an attacker can easily create an account in the application using the Victim’s E…
-
Unscored —
Command injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508…
-
Unscored —
pyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to read Python source code.