Archive
6 September 2022
Vulnerabilities first published on this day (UTC), newest first.
157 results · Feed
-
Unscored —
In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation …
-
Unscored —
In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information d…
-
Unscored —
In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation o…
-
Unscored —
In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala…
-
Unscored —
In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o…
-
Unscored —
In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information d…
-
Unscored —
In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclos…
-
Unscored —
In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege w…
-
Unscored —
In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Unscored —
In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o…
-
Unscored —
In ged, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wi…
-
Unscored —
In teei, there is a possible memory corruption due to a use after free. This could lead to local escalation of privileg…
-
Unscored —
In vow, there is a possible information disclosure due to a symbolic link following. This could lead to local informati…
-
Unscored —
In gz, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of pr…
-
Unscored —
In teei, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privi…
-
Medium 4.3
Denial-of-Service (DoS) Vulnerability
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine.
-
Unscored —
In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege…
-
Unscored —
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o…
-
Unscored —
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o…
-
Unscored —
In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code e…
-
Medium 6.5
WP Users Exporter <= 1.4.2 - CSV Injection
The WP Users Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.2 via the 'Export Users' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add untrusted input into profi…
-
Medium 4.9
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read
The WordPress Infinite Scroll – Ajax Load More plugin for Wordpress is vulnerable to arbitrary file reading in versions up to, and including, 5.5.3 due to insufficient file path validation on the alm_repeaters_export() function. This makes it possible for aut…
-
Medium 4.9
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal
The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 5.5.3 via the 'type' parameter found in the alm_get_layout() function. This makes it possible for authenticated attacker…
-
Medium 5.3
WP Cerber Security <= 9.0 - User Enumeration Bypass
The WP Cerber Security plugin for WordPress is vulnerable to security protection bypass in versions up to, and including 9.0, that makes user enumeration possible. This is due to improper validation on the value supplied through the 'author' parameter found i…
-
Medium 6.4
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Media URL
The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media Image URL value that can be added to an Image Hover in versions up to, and including, 9.7.3 due to insufficient input sanitization and output esca…
-
Medium 6.4
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Image URL
The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Image URL' value found in the Media block in versions up to, and including, 2.5.5.2 due to insufficient input sanitization and output escaping. Thi…
-
Medium 6.4
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Text Editor
The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Text Editor' block in versions up to, and including, 2.5.5.2 due to insufficient input sanitization and output escaping. This makes it possible for…
-
Medium 6.4
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Video Link
The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Video Link values that can be added to an Image Hover in versions up to, and including, 9.7.3 due to insufficient input sanitization and output escaping. Th…
-
High 7.2
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the joomsport-page-extrafields page in versions up to, and including, 5.2.5 due to insufficient escaping on t…
-
Medium 5.5CVE-2022-2941 Public exploit
WP-UserOnline <= 2.88.0 - Authenticated (Admin+) Stored Cross-Site Scripting
The WP-UserOnline plugin for WordPress has multiple Stored Cross-Site Scripting vulnerabilities in versions up to, and including 2.88.0. This is due to the fact that all fields in the "Naming Conventions" section do not properly sanitize user input, nor escap…
-
High 8.8
uContext for Clickbank <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the ~/app/sites/ajax/actions/keyword_save.php file that is c…
-
High 7.5
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side reque…
-
High 8.8
uContext for Amazon <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
The uContext for Amazon plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the ~/app/sites/ajax/actions/keyword_save.php file that is call…
-
Medium 6.4
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via 'caption'
The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption' parameter added to images via the media uploader in versions up to, and including, 2.5.5.2 due to insufficient input sanitization and outp…
-
High 8.8
Link Optimizer Lite <= 1.4.5 - Cross-Site Request Forgery to Cross-Site Scripting
The Link Optimizer Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 1.4.5. This is due to missing nonce validation on the admin_page function found in the ~/admin.php file. This mak…
-
High 7.2
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the joomsport-events-form page in versions up to, and including, 5.2.5 due to insufficient escaping on the us…
-
Medium 6.4
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Title'
The Visual Composer Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post/page 'Title' value in versions up to, and including, 45.0 due to insufficient input sanitization and output escaping. This makes it possible for…
-
High 8.8
Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2.1. This is due to missing nonce validation on the stockist_settings_main() function. This makes it possible for unau…
-
Medium 6.4
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Caption - On Hover
The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Caption - On Hover' value associated with images in versions up to, and including, 2.5.5.2 due to insufficient input sanitization and output escapi…