Archive
21 November 2022
Vulnerabilities first published on this day (UTC), newest first.
90 results · Feed
-
Low —
`CHECK` failure in `SobolSample` via missing validation
### Impact Another instance of CVE-2022-35935, where `SobolSample` is vulnerable to a denial of service via assumed scalar inputs, was found and fixed. ```python import tensorflow as tf tf.raw_ops.SobolSample(dim=tf.constant([1,0]), num_results=tf.constant([1…
-
Low —
`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode
### Impact Another instance of CVE-2022-35991, where `TensorListScatter` and `TensorListScatterV2` crash via non scalar inputs in`element_shape`, was found in eager mode and fixed. ```python import tensorflow as tf arg_0=tf.random.uniform(shape=(2, 2, 2), dty…
-
Critical 9.8
A potential security vulnerability has been identified in OMEN Gaming Hub and in HP Command Center which may allow esca…
-
Critical 9.8
A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability …
-
High 8.4
A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow a…
-
Critical 9.8CVE-2021-3437 EPSS 16%
Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of…
-
High 8.4
A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation …
-
High 7.8
A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of pr…
-
High 7.5
Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied w…
-
High 7.8
A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a loca…
-
High 7.8
An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could al…
-
High 7.0
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a loc…
-
High 7.8
A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as…
-
High 7.8
An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex On…
-
Medium 5.5
An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to d…
-
Medium 5.5
An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to d…
-
High 7.2
IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execu…
-
High 8.8
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A …
-
High 8.8
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By…
-
High 8.8CVE-2022-37332 Public exploit
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A …
-
High 8.8
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By…
-
High 8.8
Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection
The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via deserialization of untrusted input supplied via the import, mfn-items-import-page, and mfn-items-import parameters passed through the mfn_buil…
-
High 8.1
Miele: Vulnerability in cloud service used by appWash
An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP…
-
Medium 6.5CVE-2020-23582 Public exploit
A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could allow an unauthenticated, …
-
Medium 6.1
Five Star Restaurant Reservations < 2.4.12 - Unauthenticated Arbitrary Payment Status Update to Stored XSS
The Five Star Restaurant Reservations WordPress plugin before 2.4.12 does not have authorisation when changing whether a payment was successful or failed, allowing unauthenticated users to change the payment status of arbitrary bookings. Furthermore, due to t…
-
Medium 6.8
An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in Insyde InsydeH2O with …
-
High 8.8
My wpdb < 2.5 - Arbitrary SQL Query via CSRF
The My wpdb WordPress plugin before 2.5 is missing CSRF check when running SQL queries, which could allow attacker to make a logged in admin run arbitrary SQL query via a CSRF attack
-
Medium 5.3
WP-Polls < 2.76.0 - IP Validation Bypass
The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.
-
High 7.5
Login Block IPs <= 1.0.0 - IP Spoofing Bypass
The function check_is_login_page() uses headers for the IP check, which can be easily spoofed.
-
Low 2.6
iPXE TLS tls.c tls_new_ciphertext information exposure
A vulnerability was found in iPXE. It has been declared as problematic. This vulnerability affects the function tls_new_ciphertext of the file src/net/tls.c of the component TLS. The manipulation of the argument pad_len leads to information exposure through d…
-
High 7.1
Cross-site Scripting (XSS) - Stored in kiwitcms/kiwi
A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.
-
High 8.8CVE-2022-4096 Public exploit
Server-Side Request Forgery (SSRF) in appsmithorg/appsmith
Server-Side Request Forgery (SSRF) in GitHub repository appsmithorg/appsmith prior to 1.8.2.
-
High 8.1
SQL Injection in dolibarr/dolibarr
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputati…
-
Medium 5.4
URL XSS vulnerability due to outdated jquery in CMS
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).
-
Medium 5.3
Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1
A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue a…
-
High 8.8
Blind SQL Injection via GridFieldSortableHeader
Silverstripe silverstripe/framework through 4.11 allows SQL Injection.
-
High 8.8
Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.
-
Medium 5.5
Popup Maker < 1.16.11 - Contributor+ Stored Cross Site Scripting
The Popup Maker WordPress plugin before 1.16.11 does not sanitise and escape some of its Popup options, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks, which could be used against admins
-
High 8.1
Booster for WooCommerce - Checkout Files Deletion via CSRF
The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not have CSRF check in place when deleting files uploaded at the checkout, al…
-
High 7.5
DeepL Pro API Translation < 1.7.5 - API Key Disclosure
The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information (including the DeepL API key) in files that are publicly accessible to an external, unauthenticated visitor.