Archive
17 July 2022
Vulnerabilities first published on this day (UTC), newest first.
76 results · Feed
-
Unscored —
Pexip Infinity 27.x before 27.3 has Improper Input Validation. The client API allows remote attackers to trigger a soft…
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP.
-
Medium 5.3
Chcnav - P5E GNSS Information disclosure
Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sys_username_passwd.cmd - The server loads the request clearly by default. Disclosure …
-
Unscored —
Pexip Infinity 27.x before 27.2 has Improper Access Control. An attacker can sometimes join a conference (call join) if…
-
Unscored —CVE-2022-31260 Scanner template
In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collecti…
-
Unscored —
pyenv 1.2.24 through 2.3.2 allows local users to gain privileges via a .python-version file in the current working dire…
-
Unscored —
A Cross-Site Request Forgery (CSRF) in Ferdi through 5.8.1 and Ferdium through 6.0.0-nightly.98 allows attackers to rea…
-
Unscored —
Download Monitor < 4.5.91 - Admin+ Arbitrary File Download
The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened enviro…
-
Unscored —
Accept Stripe Payments < 2.0.64 - Admin+ Stored Cross-Site Scripting
The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —CVE-2022-2187 Scanner template
Contact Form 7 Captcha < 0.1.2 - Reflected Cross-Site Scripting
The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
-
Unscored —
Simple Post Notes < 1.7.6 - Admin+ Stored Cross-Site Scripting
The Simple Post Notes WordPress plugin before 1.7.6 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Advanced Database Cleaner < 3.1.1 - Reflected Cross-Site Scripting
The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting
-
Unscored —
Loading Page with Loading Screen < 1.0.83 - Admin+ Stored Cross-Site Scripting
The Loading Page with Loading Screen WordPress plugin before 1.0.83 does not escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —CVE-2022-2168 Scanner template
Download Manager < 3.2.44 - Reflected Cross-Site Scripting
The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an attribute of the history dashboard, leading to Reflected Cross-Site Scripting
-
Unscored —
Best Contact Management Software <= 3.7.3 - Admin+ Stored Cross-Site Scripting
The Best Contact Management Software WordPress plugin through 3.7.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Very Simple Breadcrumb <= 1.0 - Admin+ Stored Cross-Site Scripting
The Very Simple Breadcrumb WordPress plugin through 1.0 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
LinkedIn Company Updates <= 1.5.3 - Admin+ Stored Cross-Site Scripting
The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Import CSV Files <= 1.0 - Reflected Cross-Site Scripting
The Import CSV Files WordPress plugin through 1.0 does not sanitise and escaped imported data before outputting them back in a page, and is lacking CSRF check when performing such action as well, resulting in a Reflected Cross-Site Scripting
-
Unscored —
Jquery Validation For Contact Form 7 < 5.3 - Arbitrary Options Update via CSRF
The Jquery Validation For Contact Form 7 WordPress plugin before 5.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change Blog options like default_role, users_can_register via a CSRF attack
-
Unscored —
OAuth Single Sign On < 6.22.6 - Authentication Bypass
The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address.
-
Unscored —
404s < 3.5.1 - Admin+ Stored Cross-Site Scripting
The 404s WordPress plugin before 3.5.1 does not sanitise and escape its fields, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Data Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scripting
The Data Tables Generator by Supsystic WordPress plugin before 1.10.20 does not sanitise and escape some of its Table settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capabi…
-
Unscored —
Page Generator Plugin < 1.6.5 - Admin+ Stored Cross-Site Scripting
The Page Generator WordPress plugin before 1.6.5 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Medium 4.8
WooCommerce < 6.6.0 - Admin+ Stored HTML Injection
The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles
-
Unscored —
Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting
The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back in an attribute of the plugin's discount rule page, leading to Reflected Cross-Site Scripting
-
Unscored —CVE-2022-1933 Scanner template
CDI < 5.1.9 - Reflected Cross-Site-Scripting
The CDI WordPress plugin before 5.1.9 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting
-
Unscored —
Insights from Google PageSpeed < 4.0.7 - Multiple CSRF
The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks
-
Unscored —
WP User Manager < 2.6.3 - Arbitrary User Password Reset to Account Compromise
The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password (to an arbitrary value) of any user knowing only their ID…
-
Medium 4.0
Prototype Pollution
This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
-
Medium 4.3
FileZilla Server PORT confused deputy
A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT Handler. The manipulation leads to unintended intermediary. It is possible to initiate the attack remotely. Up…
-
Unscored —
In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when con…
-
Unscored —
Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation.
-
Unscored —
An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line.…
-
Unscored —
An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malf…
-
High 8.8
An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entri…
-
Unscored —
In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Servi…