Archive
10 November 2022
Vulnerabilities first published on this day (UTC), newest first.
45 results · Clear filters · Feed
-
Medium 6.5
WordPress Traffic Manager plugin <= 1.4.5 - Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS)
Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS) in Traffic Manager plugin <= 1.4.5 on WordPress.
-
Medium 5.9
ETIC Telecom Remote Access Server Unrestricted Upload of File with Dangerous Type
All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior is vulnerable to malicious file upload. An attacker could take advantage of this to store malicious files on the server, which could override sensitive and useful existing files on the fi…
-
Medium 6.2
ETIC Telecom Remote Access Server Path Traversal
All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s application programmable interface (API) is vulnerable to directory traversal through several different methods. This could allow an attacker to read sensitive files from the server, in…
-
Medium 4.3
A vulnerability in the module import function of the administrative interface of Cisco Firepower Management Center (FMC…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 5.3
A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, rem…
-
Medium 5.3
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow a…
-
Medium 5.8
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multip…
-
Medium 5.8
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multip…
-
Medium 5.8
A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance …
-
Medium 6.3
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an …
-
Medium 6.3
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an …
-
Medium 6.0
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an auth…
-
Medium 5.8
A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD) Software could allow an …
-
Medium 6.5
A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authentica…
-
Medium 6.4
A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive…
-
Medium —
Read the Docs vulnerable to Cross-Site Scripting (XSS)
### Impact This vulnerability allowed a malicious user to serve arbitrary HTML files from the main application domain (readthedocs[.]org/readthedocs[.]com) by exploiting a vulnerability in the code that serves downloadable content from a project. Exploiting t…
-
Medium 5.4
Wiesemann & Theis: XSS vulnerability in web interface of the Com-Server family
Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage
-
Medium 4.3
SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload
A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 al…
-
Medium 4.3
SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 a…
-
Medium 5.0
Nomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/
HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 workload identity token can list non-sensitive metadata for paths under nomad/ that belong to other jobs in the same namespace. Fixed in 1.4.2.
-
Medium 6.5CVE-2022-38121 Public exploit
POWERCOM CO., LTD. UPSMON PRO - Insufficiently Protected Credentials
UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users‘ and administrators' account names and passwords via this unprotected configuration file.
-
Medium 6.5CVE-2022-38120 Public exploit
POWERCOM CO., LTD. UPSMON PRO - Path Traversal
UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files.
-
Medium 6.5
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user w…
-
Medium 6.1
dotCMS before 22.06 allows remote attackers to bypass intended access control and obtain sensitive information by using…
-
Medium 5.9
Wasmtime vulnerable to out of bounds read/write with zero-memory-pages configuration
Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator when the allocator is configured to give WebAssembly instances a maximum of zero pages of memory. In this c…