Archive
September 2022
Vulnerabilities first published in this month (UTC), newest first.
2,174 results · Feed
-
Unscored —
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.…
-
Unscored —
The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third…
-
Unscored —
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third p…
-
Unscored —
The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third p…
-
Unscored —CVE-2022-37203 Public exploit
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filte…
-
Unscored —
The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third pa…
-
Unscored —
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id88, UserForm:j_id…
-
Unscored —
The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third pa…
-
Unscored —
The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege Escalation.
-
Unscored —
The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a thi…
-
Unscored —
The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a thi…
-
Unscored —
The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third part…
-
Unscored —
The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third part…
-
Unscored —
The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third pa…
-
Unscored —
The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third pa…
-
Unscored —
The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third part…
-
Unscored —
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third…
-
Unscored —
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer.
-
Unscored —
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand.
-
Unscored —
]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime.
-
Unscored —
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function: formSetFirewallCfg.
-
Unscored —
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName.
-
Unscored —
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement.
-
Unscored —
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo.
-
Unscored —
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi.
-
Unscored —
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set.
-
Unscored —
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic.
-
Unscored —
Gettext override translations < 2.0.0 - Admin+ Stored Cross-Site Scripting
The Gettext override translations WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is …
-
Unscored —
Slickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site Scripting
The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
BadgeOS < 3.7.1.3 - Subscriber+ SQLi
The BadgeOS WordPress plugin before 3.7.1.3 does not sanitise and escape parameters before using them in SQL statements via AJAX actions available to any authenticated users, leading to SQL Injections
-
Unscored —CVE-2022-2754 EPSS 40%
Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi
The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL Injection attacks