Archive
October 2022
Vulnerabilities first published in this month (UTC), newest first.
1,865 results · Feed
-
Medium 5.5
Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail.
-
Medium 5.5
pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component __sa…
-
Critical 9.8
thlorenz browserify-shim vulnerable to prototype pollution
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js.
-
High 7.5
kangax html-minifier REDoS vulnerability
A Regular Expression Denial of Service (ReDoS) flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression.
-
Medium 5.5
tsMuxer v2.6.16 was discovered to contain a heap overflow via the function BitStreamWriter::flushBits() at /tsMuxer/bit…
-
Medium 5.5
rtf2html v0.2.0 was discovered to contain a heap overflow in the component /rtf2html/./rtf_tools.h.
-
High 7.8
Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalatio…
-
Medium 5.5
timg v1.4.4 was discovered to contain a memory leak via the function timg::QueryBackgroundColor() at /timg/src/term-que…
-
Critical 9.8
-
High 7.5CVE-2021-40661 Scanner template
A remote, unauthenticated, directory traversal vulnerability was identified within the web interface used by IND780 Adv…
-
Unscored —
An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/scr24x_cs.c has a race condition and res…
-
Unscored —
An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and res…
-
Medium 6.4
An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a race condition and res…
-
High 7.5
Weak Password Requirements in thorsten/phpmyfaq
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
-
Medium 5.3
PwnDoc through 0.5.3 might allow remote attackers to identify valid user account names by leveraging response timings f…
-
Medium 5.5
OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions
An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, …
-
Unscored —
PwnDoc through 0.5.3 might allow remote attackers to identify disabled user account names by leveraging response messag…
-
High 8.8
In Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell metacharacters in the hos…
-
Unscored —
multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction …
-
Unscored —
multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in con…
-
High 8.1
curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it se…
-
High 7.5
In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, cur…
-
Critical 9.8
Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitra…
-
Critical 9.6
Web Stories <= 1.24.0 - Server Side Request Forgery
The Web Stories plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including 1.24.0 due to insufficient validation of URLs supplied via the 'url' parameter found via the /v1/hotlink/proxy REST API Endpoint. This makes it …
-
Medium 6.1
Log HTTP Requests <= 1.3.1 - Stored Cross-Site Scripting
The Log HTTP Requests plugin for WordPress is vulnerable to Stored Cross-Site Scripting via logged HTTP requests in versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated att…
-
High 8.8
The Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing site editors to include…
-
Medium 6.5
Using custom code, an attacker can write into name or description fields larger than the appropriate buffer size causin…
-
Critical 9.1
Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted…
-
Critical 9.8
Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Comma…
-
Critical 9.8
Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands”…
-
Critical 9.2
The HEIDENHAIN Controller TNC 640 NC software Version 340590 07 SP5, is vulnerable to improper authentication in its DN…
-
High 7.5
WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability
Auth. SQL Injection (SQLi) vulnerability in Quiz And Survey Master plugin <= 7.3.4 on WordPress.
-
Low 3.4
WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability
Auth. (editor+) Reflected Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.
-
Medium 6.5
The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks_sa…
-
High 8.8
The demon image annotation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and incl…
-
Medium 5.4
WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.
-
Medium 4.8
WordPress Testimonials plugin <= 2.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themepoints Testimonials plugin <= 2.6 on WordPress.
-
Critical 9.9
The FILES directive inside a VM template allows execution of uploaded files when the template is instantiated, resulting in a Remote Code Execution (RCE) attack.
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in OpenNebula OpenNebula core on Linux allows Remote Code Inclusion.
-
Medium 4.3
Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on Linux allows File Conten…
-
Medium 6.5
The FILES Directive allows arbitrary files from the frontend system (including sensitive files) to be included when a VM is started from that template, which may result in Information Disclosure.
Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery.