Archive
September 2022
Vulnerabilities first published in this month (UTC), newest first.
2,174 results · Feed
-
Medium 6.5
Ultimate SMS Notifications for WooCommerce <= 1.4.1 - CSV Injection
The Ultimate SMS Notifications for WooCommerce plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.1 via the 'Export Utility' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add…
-
Medium 6.4
Simple SEO <= 1.7.91 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and including 1.7.91, due to insufficient sanitization or escaping on the SEO social and standard title parameters. This can be exploited by au…
-
High 8.8
Banner Cycler <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
The Banner Cycler plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the pabc_admin_slides_postback() function found in the ~/admin/admin.php file. This makes it po…
-
Unscored —
A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to finger…
-
Medium 4.3
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation …
-
Unscored —
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation …
-
Unscored —
A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery consol…
-
Medium 4.8
WordPress Poll, Survey, Questionnaire and Voting system plugin <= 1.7.4 - Authenticated Cross-Site Scripting (XSS) vulnerability
Authenticated (admin+) Cross-Site Scripting (XSS) vulnerability in wpdevart Poll, Survey, Questionnaire and Voting system plugin <= 1.7.4 at WordPress.
-
Medium 5.4
WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity
Cross-Site Request Forgery (CSRF) vulnerability in WPdevelop/Oplugins Booking Calendar plugin <= 9.2.1 at WordPress leading to Translations Update.
-
Medium 5.4
WordPress Beaver Builder plugin <= 2.5.4.3 - Broken Access Control vulnerability
Broken Access Control vulnerability in Beaver Builder plugin <= 2.5.4.3 at WordPress.
-
Unscored —
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation …
-
Unscored —
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation …
-
Unscored —
Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successfu…
-
Unscored —
A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only …
-
Unscored —
Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection.…
-
Unscored —
Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection.…
-
Unscored —
AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an atta…
-
High 8.1
Barbican authorization flaw before v14.0.0
An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network …
-
Unscored —
A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communi…
-
Unscored —
AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an atta…
-
Unscored —
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function …
-
Unscored —
A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() functio…
-
Unscored —
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially c…
-
High 7.3
WordPress WP Libre Form 2 plugin <= 2.0.8 - Unauthenticated Sensitive Information Disclosure vulnerability
Unauthenticated Sensitive Information Disclosure vulnerability in WP Libre Form 2 plugin <= 2.0.8 at WordPress allows attackers to list and delete submissions. Affects only versions from 2.0.0 to 2.0.8.
-
Medium 4.3
Denial-of-Service (DoS) Vulnerability
A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing the scanning request.
-
Medium 6.5
Stack Overflow in ESET Endpoint Encryption and ESET Full Disk Encryption for Windows
The vulnerability in the driver dlpfde.sys enables a user logged into the system to perform system calls leading to kernel stack overflow, resulting in a system crash, for instance, a BSOD.
-
Unscored —
A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for …
-
Medium 4.8
WordPress Launcher: Coming Soon & Maintenance Mode plugin <= 1.0.11 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop Launcher: Coming Soon & Maintenance Mode plugin <= 1.0.11 at WordPress.
-
Unscored —
Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted …
-
High 7.5
x/crypto/ssh vulnerable to panic via malformed packets
The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.
-
Unscored —
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in bi…
-
Unscored —
In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmwar…
-
Unscored —
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa.
-
Unscored —
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.
-
Unscored —
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa.
-
Unscored —
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow v…
-
Unscored —
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.
-
Unscored —
In TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow.sample.
-
Unscored —
TOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi.
-
Unscored —
In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for …