Archive
5 August 2022
Vulnerabilities first published on this day (UTC), newest first.
169 results · Feed
-
Medium 4.3
An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions …
-
Low 2.7
An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before …
-
Medium 4.4
A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15…
-
Medium 5.9
An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, a…
-
Low 2.2
An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions start…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 befo…
-
Medium 6.4
An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 befo…
-
Low 3.5
A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions start…
-
Medium 6.4
An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4,…
-
Medium 4.9
An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 befo…
-
Medium 6.2
Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15…
-
Medium 5.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 1…
-
Medium 6.5
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions star…
-
Low 3.5
An issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0.5, all versions starti…
-
High 8.5
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions star…
-
Medium 5.3
An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions startin…
-
Medium 6.4
WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change
Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin (free) should be at least installed to get the extra input field on …
-
Medium 5.4
WordPress Rich Reviews by Starfish plugin <= 1.9.14 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Rich Reviews by Starfish plugin <= 1.9.14 at WordPress allows an attacker to delete reviews.
-
Medium 6.3
WordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key.
-
Medium 6.5
WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerability
Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin <= 0.2.27 at WordPress allows unauthenticated post update/create/delete.
-
Medium 5.0
WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities
Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress.
-
Unscored —
VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network …
-
Unscored —
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability af…
-
Unscored —
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A …
-
Unscored —
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities.…
-
Unscored —
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with …
-
Unscored —
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vu…
-
Unscored —
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A m…
-
Unscored —
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A …
-
Unscored —CVE-2022-31660 Public exploit
VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A …
-
Unscored —
VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerabilit…
-
High 8.2
Ethermint DoS through Unintended Contract Selfdestruct
Ethermint is an Ethereum library. In Ethermint running versions before `v0.17.2`, the contract `selfdestruct` invocation permanently removes the corresponding bytecode from the internal database storage. However, due to a bug in the `DeleteAccount`function, a…
-
High 7.3
SourceCodester Best Fee Management System admin_class.php login sql injection
A vulnerability was found in SourceCodester Best Fee Management System. It has been rated as critical. Affected by this issue is the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. The attack may b…
-
Medium 6.3
Rigatur Online Booking and Hotel Management System POST Request login.php sql injection
A vulnerability was found in Rigatur Online Booking and Hotel Management System aff6409. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Request Handler. The manipulation…
-
Medium 6.3
SourceCodester Garage Management System createUser.php sql injection
A vulnerability was found in SourceCodester Garage Management System. It has been classified as critical. Affected is an unknown function of the file createUser.php. The manipulation of the argument userName/uemail leads to sql injection. It is possible to la…
-
Medium 6.3
SourceCodester Garage Management System removeUser.php sql injection
A vulnerability was found in SourceCodester Garage Management System and classified as critical. This issue affects some unknown processing of the file removeUser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated rem…
-
Medium 6.3
SourceCodester Loan Management System delete_lplan.php sql injection
A vulnerability was found in SourceCodester Loan Management System and classified as critical. This issue affects some unknown processing of the file delete_lplan.php. The manipulation of the argument lplan_id leads to sql injection. The attack may be initiat…
-
Medium 6.3
SourceCodester Simple E-Learning System classroom.php sql injection
A vulnerability classified as critical was found in SourceCodester Simple E-Learning System. Affected by this vulnerability is an unknown functionality of the file classroom.php. The manipulation of the argument post_id leads to sql injection. The attack can …
-
High 7.3
Private Cloud Management Platform POST Request global_config_query improper authentication
A vulnerability classified as critical has been found in Private Cloud Management Platform. Affected is an unknown function of the file /management/api/rcx_management/global_config_query of the component POST Request Handler. The manipulation leads to imprope…
-
High 8.5
Code Injection in hestiacp/hestiacp
Improper Control of Generation of Code ('Code Injection') in GitHub repository hestiacp/hestiacp prior to 1.6.6.