Skip to content
OpenAdvisories

Archive

16 November 2022

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.8

    Permalink Manager Lite <= 2.2.20.1 - Cross-Site Request Forgery

    The Permalink Manager Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.2.20.1. This is due to missing or incorrect nonce validation on the extra_actions function. This makes it possible for unauthentica…

  • High 8.6

    Unauthorized modification in Karmasis Informatics Infraskope SIEM+

    Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to modificate logs.

  • High 8.8

    An issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is po…

  • High 7.5

    Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download…

  • High 8.8
    CVE-2021-38819 Public exploit

    A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through "id" parameter on the al…