Archive
July 2022
Vulnerabilities first published in this month (UTC), newest first.
1,993 results · Feed
-
Unscored —CVE-2021-40149 Scanner template
The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory.…
-
Unscored —
Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719.
-
Unscored —
Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because…
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.
-
Unscored —
Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Univ…
-
Unscored —
Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP.
-
Unscored —
Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via O…
-
Unscored —
Pexip Infinity 27.x before 27.3 has Improper Input Validation. The client API allows remote attackers to trigger a soft…
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP.
-
Medium 5.3
Chcnav - P5E GNSS Information disclosure
Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sys_username_passwd.cmd - The server loads the request clearly by default. Disclosure …
-
Unscored —
Pexip Infinity 27.x before 27.2 has Improper Access Control. An attacker can sometimes join a conference (call join) if…
-
Unscored —CVE-2022-31260 Scanner template
In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collecti…
-
Unscored —
pyenv 1.2.24 through 2.3.2 allows local users to gain privileges via a .python-version file in the current working dire…
-
Unscored —
A Cross-Site Request Forgery (CSRF) in Ferdi through 5.8.1 and Ferdium through 6.0.0-nightly.98 allows attackers to rea…
-
Unscored —
Download Monitor < 4.5.91 - Admin+ Arbitrary File Download
The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened enviro…
-
Unscored —
Accept Stripe Payments < 2.0.64 - Admin+ Stored Cross-Site Scripting
The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —CVE-2022-2187 Scanner template
Contact Form 7 Captcha < 0.1.2 - Reflected Cross-Site Scripting
The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
-
Unscored —
Simple Post Notes < 1.7.6 - Admin+ Stored Cross-Site Scripting
The Simple Post Notes WordPress plugin before 1.7.6 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Advanced Database Cleaner < 3.1.1 - Reflected Cross-Site Scripting
The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting
-
Unscored —
Loading Page with Loading Screen < 1.0.83 - Admin+ Stored Cross-Site Scripting
The Loading Page with Loading Screen WordPress plugin before 1.0.83 does not escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —CVE-2022-2168 Scanner template
Download Manager < 3.2.44 - Reflected Cross-Site Scripting
The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an attribute of the history dashboard, leading to Reflected Cross-Site Scripting
-
Unscored —
Best Contact Management Software <= 3.7.3 - Admin+ Stored Cross-Site Scripting
The Best Contact Management Software WordPress plugin through 3.7.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Very Simple Breadcrumb <= 1.0 - Admin+ Stored Cross-Site Scripting
The Very Simple Breadcrumb WordPress plugin through 1.0 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
LinkedIn Company Updates <= 1.5.3 - Admin+ Stored Cross-Site Scripting
The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Import CSV Files <= 1.0 - Reflected Cross-Site Scripting
The Import CSV Files WordPress plugin through 1.0 does not sanitise and escaped imported data before outputting them back in a page, and is lacking CSRF check when performing such action as well, resulting in a Reflected Cross-Site Scripting
-
Unscored —
Jquery Validation For Contact Form 7 < 5.3 - Arbitrary Options Update via CSRF
The Jquery Validation For Contact Form 7 WordPress plugin before 5.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change Blog options like default_role, users_can_register via a CSRF attack
-
Unscored —
OAuth Single Sign On < 6.22.6 - Authentication Bypass
The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address.
-
Unscored —
404s < 3.5.1 - Admin+ Stored Cross-Site Scripting
The 404s WordPress plugin before 3.5.1 does not sanitise and escape its fields, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Data Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scripting
The Data Tables Generator by Supsystic WordPress plugin before 1.10.20 does not sanitise and escape some of its Table settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capabi…
-
Unscored —
Page Generator Plugin < 1.6.5 - Admin+ Stored Cross-Site Scripting
The Page Generator WordPress plugin before 1.6.5 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Medium 4.8
WooCommerce < 6.6.0 - Admin+ Stored HTML Injection
The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles
-
Unscored —
Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting
The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back in an attribute of the plugin's discount rule page, leading to Reflected Cross-Site Scripting