Archive
28 November 2022
Vulnerabilities first published on this day (UTC), newest first.
67 results · Feed
-
Medium 6.3
This update resolves a multi-factor authentication bypass attack
-
High 7.5CVE-2022-38900 EPSS 23%
decode-uri-component vulnerable to Denial of Service (DoS)
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
-
Critical 9.8CVE-2022-36193 Public exploit
SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent chan…
-
High 8.8
An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a …
-
High 7.5
The user_id and device_id on the Ourphoto App version 1.4.1 /device/* end-points both suffer from insecure direct objec…
-
High 7.5
The /device/signin end-point for the Ourphoto App version 1.4.1 discloses clear-text password information for functiona…
-
High 7.5
The /device/acceptBind end-point for Ourphoto App version 1.4.1 does not require authentication or authorization. The u…
-
Medium 6.5
The user_token authorization header on the Ourphoto App version 1.4.1 /apiv1/* end-points is not implemented properly. …
-
High 8.4
Drag and Drop XBlock v2 has XSS Issues in Xblock Input Fields
Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target image. Versions prior to 3.0.0 are vulnerable to cross-site scripting in multiple XBlock Fields. Any platform that has deployed the XBlock…
-
Medium 4.8
Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in Admin/a…
-
High 8.8CVE-2022-45442 Public exploit
Sinatra vulnerable to Reflected File Download attack
Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition hea…
-
Medium 4.8
Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /Admin/…
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in Sanitization Management System v1.0.0 allows attackers to execute arbitra…
-
High 7.8
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file,…
-
Medium 4.8
Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in changep…
-
High 7.5
FusionAuth vulnerable to directory traversal attack
FusionAuth before 1.41.3 allows a file outside of the application root to be viewed or retrieved using an HTTP request. To be specific, an attacker may be able to view or retrieve any file readable by the user running the FusionAuth process.
-
Critical 9.8
AVS Audio Converter 10.3 is vulnerable to Buffer Overflow.
-
Medium 6.5
Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function under the Administrat…
-
Critical 9.8
Poultry Farm Management System v1.0 contains a SQL injection vulnerability via the del parameter at /Redcock-Farm/farm/…
-
Critical 9.8
Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info.
-
Medium 5.4
Dinstar FXO Analog VoIP Gateway DAG2000-16O is vulnerable to Cross Site Scripting (XSS).
-
Critical 9.8
Online Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php.
-
Low 3.5
Discourse users can see notifications for topics they no longer have access to
Discourse is an open-source discussion platform. In stable versions prior to 2.8.12 and beta or tests-passed versions prior to 2.9.0.beta.13, under certain conditions, a user can see notifications for topics they no longer have access to. If there is sensitiv…
-
Medium 5.7
Opencast Authenticated OpenRedirect Vulnerability
Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 12.5, Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users. The vulnerability a…
-
Critical 9.1
crewjam/saml go library is vulnerable to signature bypass via multiple Assertion elements
The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements. This issue has been corrected in version 0.4.9. There are no workarounds other than upgrading t…
-
Low 3.5
Discourse chat messages should have a maximum character limit
Discourse is an open-source discussion platform. Prior to version 2.9.0.beta13, users can post chat messages of an unlimited length, which can cause a denial of service for other users when posting huge amounts of text. Users should upgrade to version 2.9.0.b…
-
High 7.5
muhammara vulnerable to Unchecked Return Value to NULL Pointer Dereference
Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. The package muhammara before 2.6.2 and from 3.0.0 and before 3.3.0, as well as all versions of muhammara's predecessor package hummus, are vulnerable to Denial …