Skip to content
OpenAdvisories

Archive

17 July 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 5.3

    Chcnav - P5E GNSS Information disclosure

    Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sys_username_passwd.cmd - The server loads the request clearly by default. Disclosure …

  • Medium 4.8

    WooCommerce < 6.6.0 - Admin+ Stored HTML Injection

    The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles

  • Medium 4.0

    Prototype Pollution

    This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

  • Medium 4.3

    FileZilla Server PORT confused deputy

    A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT Handler. The manipulation leads to unintended intermediary. It is possible to initiate the attack remotely. Up…