Archive
September 2022
Vulnerabilities first published in this month (UTC), newest first.
2,174 results · Feed
-
Medium 4.3
Craw Data <= 1.0.0 - Server Side Request Forgery
The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites (SSRF).
-
Unscored —
WP Server Health Stats < 1.7.0 - Admin+ Stored Cross-Site Scripting
The WP Server Health Stats WordPress plugin before 1.7.0 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing
The Titan Anti-spam & Security WordPress plugin before 7.3.1 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.
-
Unscored —
Affiliates Manager < 2.9.14 - Admin+ Stored Cross-Site Scripting
The Affiliates Manager WordPress plugin before 2.9.14 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
Unscored —
Affiliates Manager < 2.9.14 - Affiliate CSV Injection
The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could allow users registering as affiliate to perform CSV injection attacks against an admin exporting the data
-
Unscored —
WP STAGING < 2.9.18 - Admin+ Stored Cross-Site Scripting
The WP STAGING WordPress plugin before 2.9.18 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for ex…
-
Medium 6.1
WP Taxonomy Import <= 1.0.4 - Reflected Cross-Site Scripting
The WP Taxonomy Import WordPress plugin through 1.0.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
-
Unscored —
Classified Listing Pro < 2.0.20 - Reflected Cross-Site Scripting
The Classified Listing Pro WordPress plugin before 2.0.20 does not escape a generated URL before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
-
Medium 6.1
Classima < 2.1.11 - Reflected Cross-Site Scripting
The Classima WordPress theme before 2.1.11 and some of its required plugins (Classified Listing before 2.2.14, Classified Listing Pro before 2.0.20, Classified Listing Store & Membership before 1.4.20 and Classima Core before 1.10) do not escape a parameter b…
-
Unscored —
Autoptimize < 3.1.1 - Admin+ Stored Cross Site Scripting
The Autoptimize WordPress plugin before 3.1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for ex…
-
Unscored —
WBW Currency Switcher for WooCommerce < 1.6.6 - Admin+ Stored XSS
The WBW Currency Switcher for WooCommerce WordPress plugin before 1.6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capabi…
-
Unscored —
Post SMTP < 2.1.4 - Admin+ Stored Cross-Site Scripting
The Post SMTP Mailer/Email Log WordPress plugin before 2.1.4 does not escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scripting attacks against other users even when the unfiltere…
-
Unscored —
Mobile Events Manager < 1.4.8 - Admin+ CSV Injection
The Mobile Events Manager WordPress plugin before 1.4.8 does not properly escape the Enquiry source field when exporting events, or the Paid for field when exporting transactions as CSV, leading to a CSV injection vulnerability.
-
Critical 9.8
Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivi…
-
High 8.2
Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapd…
-
High 8.4
Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Sn…
-
High 8.4
Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mob…
-
High 7.5
Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Sn…
-
High 7.3
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, …
-
High 7.3
Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compu…
-
High 7.5
Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, S…
-
High 7.5
Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapd…
-
High 8.4
Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when…
-
Medium 6.7
Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdrag…
-
Medium 6.8
Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Con…
-
Critical 9.0
Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking
-
Critical 9.4
Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon…
-
High 8.4
Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles wit…
-
High 7.8
memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Con…
-
High 7.8
Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach…
-
High 7.8
Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Indu…
-
High 7.5
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snap…
-
High 8.4
Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity…
-
High 8.4
Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobil…
-
High 8.4
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon C…
-
High 8.4
Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, S…
-
Unscored —
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab.
-
Unscored —
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f.
-
Unscored —
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b.
-
Unscored —
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d.