Archive
7 November 2022
Vulnerabilities first published on this day (UTC), newest first.
27 results · Clear filters · Feed
-
High 7.3
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Prote…
-
High 7.3
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Prote…
-
High 7.5
s::can moni::tools prone to path traversal in camera-file module
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module.
-
High 7.5
s::can moni::tools prone to path traversal in image-relocator module
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module.
-
High 8.8
s::can moni::tools autheticated SQL injection
In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS.
-
High 8.8
Role Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization
The Role Based Pricing for WooCommerce WordPress plugin before 1.6.3 does not have authorisation and proper CSRF checks, as well as does not validate path given via user input, allowing any authenticated users like subscriber to perform PHAR deserialization a…
-
High 7.2
WP All Import < 3.6.9 - Admin+ Arbitrary File Upload to RCE
The Import any XML or CSV File to WordPress plugin before 3.6.9 is not properly filtering which file extensions are allowed to be imported on the server, which could allow administrators in multi-site WordPress installations to upload arbitrary files
-
High 7.3
Maxon ERP browse_data sql injection
A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/purchase_order/browse_data. The manipulation of the argument tb_search leads to sql injection. It is possible to initiate the attack remote…
-
High 8.8
Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload
The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upload arbitrary files, such as PHP
-
High 8.8
Complianz (Free < 6.3.4, Premium < 6.3.6) - Translator SQLi
The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a tran…
-
High 8.6
An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Po…
-
High 8.0
Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection
The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files.
-
High 7.2
WP All Import < 3.6.9 - Admin+ Directory traversal via file upload
The Import any XML or CSV File to WordPress plugin before 3.6.9 is not validating the paths of files contained in uploaded zip archives, allowing highly privileged users, such as admins, to write arbitrary files to any part of the file system accessible by th…
-
High 8.8
An issue was discovered in Object First Ootbi BETA build 1.0.7.712. Management protocol has a flow which allows a remot…
-
High 7.2
Food Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /foms/al…
-
High 7.5
The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password.
-
High 7.5
The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext cached credentials.
-
High 7.5
Apache Ivy allows path traversal in the presence of a malicious repository
When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied "pattern" that may include placeholders for artifacts coordinates like the organisation, module or version. If said coordinates contain "../…
-
High 7.2
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /ph…
-
High 7.2
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet…
-
High 7.2
Canteen Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the component /youth…
-
High 7.2
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /ph…
-
High 7.2
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet…
-
High 7.5
An information disclosure vulnerability in the component vcs/downloadFiles.php?download=./search.php of Simple E-Learni…
-
High 8.8
The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third part…
-
High 7.8
Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function …
-
High 7.2
Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the c…