21 September 2022

11 results · Clear filters · Feed

• Critical 9.1
  CVE-2022-36386

  WordPress Import any XML or CSV File to WordPress plugin <= 3.6.7 - Authenticated Arbitrary Code Execution vulnerability

  Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin <= 3.6.7 at WordPress.

  Soflyy Import any XML or CSV File to WordPress (WordPress plugin) Web / CMS
  Sep 21, 2022
• Critical 9.8
  CVE-2021-43310

  A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V keys…

  Sep 21, 2022
• Critical 9.8
  CVE-2022-40030

  SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId …

  Sep 21, 2022
• Critical 9.8
  CVE-2022-41241

  Jenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity Reference

  Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

  Jenkins Project Jenkins RQM Plugin net.praqma:rqm-plugin Web / CMS Maven
  Sep 21, 2022
• Critical 9.8
  CVE-2022-41238

  Lack of authentication mechanism in Jenkins DotCi Plugin webhook

  A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits.

  Jenkins Project Jenkins DotCi Plugin com.groupon.jenkins-ci.plugins:DotCi Web / CMS Maven
  Sep 21, 2022
• Critical 9.8
  CVE-2022-41237

  RCE vulnerability in Jenkins DotCi Plugin

  Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

  Jenkins Project Jenkins DotCi Plugin com.groupon.jenkins-ci.plugins:DotCi Web / CMS Maven
  Sep 21, 2022
• Critical 9.8
  CVE-2022-41226

  Jenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity Reference

  Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

  Jenkins Project Jenkins Compuware Common Configuration Plugin com.compuware.jenkins:compuware-common-configuration Web / CMS Maven
  Sep 21, 2022
• Critical 9.4
  CVE-2022-0495

  SQL Injection in KOHA

  The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01.

  Parantez Teknoloji Parantez Teknoloji
  Sep 21, 2022
• Critical 9.4
  CVE-2022-2315

  SQL Injection in Database Accreditation System

  Database Software Accreditation Tracking/Presentation Module product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2.

  Database Software Database Software
  Sep 21, 2022
• Critical 9.8
  CVE-2022-41220 Public exploit

  md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE:…

  Sep 21, 2022
• Critical 9.8
  CVE-2022-37026

  In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass i…

  erlang erlang erlang erlang26 Debian Ubuntu Alpine
  Sep 21, 2022