Archive
7 November 2022
Vulnerabilities first published on this day (UTC), newest first.
63 results · Feed
-
Low 2.2
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber…
-
Medium 4.0
Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Home Office (W…
-
Low 2.2
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Prote…
-
Low 2.2
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Prote…
-
High 7.3
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Prote…
-
High 7.3
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Prote…
-
Medium 6.5
DXL Broker privilege escalation vulnerability
Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.
-
High 7.5
s::can moni::tools prone to path traversal in camera-file module
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module.
-
High 7.5
s::can moni::tools prone to path traversal in image-relocator module
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module.
-
High 8.8
s::can moni::tools autheticated SQL injection
In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS.
-
Medium 6.5
A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted website could…
-
Low 3.5
A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below.…
-
Medium 6.5
Cross-site Scripting (XSS) - DOM in jgraph/drawio
Cross-site Scripting (XSS) - DOM in GitHub repository jgraph/drawio prior to 20.5.2.
-
High 8.8
Role Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization
The Role Based Pricing for WooCommerce WordPress plugin before 1.6.3 does not have authorisation and proper CSRF checks, as well as does not validate path given via user input, allowing any authenticated users like subscriber to perform PHAR deserialization a…
-
Medium 5.3
WP Hide <= 0.0.2 - Unauthenticated Settings Update
The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted request
-
High 7.2
WP All Import < 3.6.9 - Admin+ Arbitrary File Upload to RCE
The Import any XML or CSV File to WordPress plugin before 3.6.9 is not properly filtering which file extensions are allowed to be imported on the server, which could allow administrators in multi-site WordPress installations to upload arbitrary files
-
Medium 4.3
Product Stock Manager < 1.0.5 - Subscriber+ Unauthorised AJAX Calls
The Product Stock Manager WordPress plugin before 1.0.5 does not have authorisation and proper CSRF checks in multiple AJAX actions, allowing users with a role as low as subscriber to call them. One action in particular could allow to update arbitrary options
-
Critical 9.8CVE-2022-3481 Scanner template
WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi
The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injection
-
High 7.3
Maxon ERP browse_data sql injection
A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/purchase_order/browse_data. The manipulation of the argument tb_search leads to sql injection. It is possible to initiate the attack remote…
-
High 8.8
Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload
The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upload arbitrary files, such as PHP
-
Critical 9.8
FluentForm < 4.3.13 - CSV Injection
The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection
-
High 8.8
Complianz (Free < 6.3.4, Premium < 6.3.6) - Translator SQLi
The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a tran…
-
High 8.6
An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Po…
-
High 8.0
Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection
The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files.
-
Medium 4.8
Highlight Focus <= 1.1 - Admin+ Stored Cross Site Scripting
The Highlight Focus WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…
-
High 7.2
WP All Import < 3.6.9 - Admin+ Directory traversal via file upload
The Import any XML or CSV File to WordPress plugin before 3.6.9 is not validating the paths of files contained in uploaded zip archives, allowing highly privileged users, such as admins, to write arbitrary files to any part of the file system accessible by th…
-
Medium 4.3
Easy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRF
The Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually a payment history. As a result, attackers could make a logged in admin delete a…
-
Critical 9.8
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.…
-
Critical 9.8
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Critical 9.8
The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third part…
-
Critical 9.8
An issue was discovered in Object First Ootbi BETA build 1.0.7.712. The authorization service has a flow that allows ge…
-
High 8.8
An issue was discovered in Object First Ootbi BETA build 1.0.7.712. Management protocol has a flow which allows a remot…
-
Critical 9.8
btcd mishandles witness size checking
btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.
-
Medium 6.5CVE-2022-44793 EPSS 53%
handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Except…
-
Medium 6.5
An issue was discovered in Object First Ootbi BETA build 1.0.7.712. A flaw was found in the Web Service, which could le…
-
Critical 9.8
The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third part…
-
Critical 9.8
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third par…
-
Critical 9.8
The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third…
-
Critical 9.8
The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third…
-
Medium 6.5CVE-2022-44792 EPSS 52%
handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bu…