Archive
16 November 2022
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
High 8.8
Permalink Manager Lite <= 2.2.20.1 - Cross-Site Request Forgery
The Permalink Manager Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.2.20.1. This is due to missing or incorrect nonce validation on the extra_actions function. This makes it possible for unauthentica…
-
High 8.6
Unauthorized modification in Karmasis Informatics Infraskope SIEM+
Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to modificate logs.
-
High 8.8
An issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is po…
-
High 7.5
Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download…
-
High 8.8CVE-2021-38819 Public exploit
A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through "id" parameter on the al…