Archive
10 November 2022
Vulnerabilities first published on this day (UTC), newest first.
92 results · Feed
-
Critical —
eZ Platform users with the Company admin role can assign any role to any user
Critical severity. Users with the Company admin role (introduced by the company account feature in v4) can assign any role to any user. This also applies to any other user that has the role / assign policy. Any subtree limitation in place does not have any ef…
-
Critical —
eZ Platform users with the Company admin role can assign any role to any user
Critical severity. Users with the Company admin role (introduced by the company account feature in v4) can assign any role to any user. This also applies to any other user that has the role / assign policy. Any subtree limitation in place does not have any ef…
-
Critical —
eZ Platform users with the Company admin role can assign any role to any user
Critical severity. Users with the Company admin role (introduced by the company account feature in v4) can assign any role to any user. This also applies to any other user that has the role / assign policy. Any subtree limitation in place does not have any ef…
-
Critical —
eZ Platform users with the Company admin role can assign any role to any user
Critical severity. Users with the Company admin role (introduced by the company account feature in v4) can assign any role to any user. This also applies to any other user that has the role / assign policy. Any subtree limitation in place does not have any ef…
-
Critical —
Ibexa DXP users with the Company admin role can assign any role to any user
Critical severity. Users with the Company admin role (introduced by the company account feature in v4) can assign any role to any user. This also applies to any other user that has the role / assign policy. Any subtree limitation in place does not have any ef…
-
Critical —
Ibexa DXP users with the Company admin role can assign any role to any user
Critical severity. Users with the Company admin role (introduced by the company account feature in v4) can assign any role to any user. This also applies to any other user that has the role / assign policy. Any subtree limitation in place does not have any ef…
-
Critical —
ibexa/admin-ui vulnerable to Cross-site Scripting in content type name/shortname
Critical severity. It is possible to inject JavaScript XSS in the content type entries "name" and "short name". To exploit this, one must already have permission to edit content types, which limits it in many cases to people who are already administrators. Ho…
-
High 7.5
Improper input validation in the firmware for some Intel(R) Server Board M10JNP Family before version 7.216 may allow a…
-
Critical —
ezplatform-admin-ui vulnerable to Cross-Site Scripting (XSS)
It is possible to inject JavaScript XSS in the content type entries "name" and "short name". To exploit this, one must already have permission to edit content types, which limits it in many cases to people who are already administrators. However, please verif…
-
Medium 6.5
WordPress Traffic Manager plugin <= 1.4.5 - Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS)
Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS) in Traffic Manager plugin <= 1.4.5 on WordPress.
-
Critical —
GraphQL queries can expose password hashes
### Impact Unauthenticated GraphQL queries for user accounts can expose password hashes of users that have created or modified content, typically but not necessarily limited to administrators and editors. ### Patches Affected versions: Ibexa DXP v3.3.\*, v4.2…
-
High 7.6
ETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity
All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide a backdoor to an attacker and provide privilege escalation to the device.
-
Medium 5.9
ETIC Telecom Remote Access Server Unrestricted Upload of File with Dangerous Type
All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior is vulnerable to malicious file upload. An attacker could take advantage of this to store malicious files on the server, which could override sensitive and useful existing files on the fi…
-
Medium 6.2
ETIC Telecom Remote Access Server Path Traversal
All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s application programmable interface (API) is vulnerable to directory traversal through several different methods. This could allow an attacker to read sensitive files from the server, in…
-
High 7.5
Panic in github.com/shamaton/msgpack/v2
Unmarshal can panic on some inputs, possibly allowing for denial of service attacks.
-
Medium 4.3
A vulnerability in the module import function of the administrative interface of Cisco Firepower Management Center (FMC…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 5.3
A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, rem…
-
Medium 5.3
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow a…
-
Medium 5.8
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multip…
-
Medium 5.8
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multip…
-
Medium 5.8
A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance …
-
Medium 6.3
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an …
-
Medium 6.3
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an …
-
Medium 6.0
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an auth…
-
Medium 5.8
A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD) Software could allow an …