Skip to content
OpenAdvisories

Archive

29 November 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.8

    Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification

    The Simple:Press plugin for WordPress is vulnerable to arbitrary file modifications in versions up to, and including, 6.8 via the 'file' parameter which does not properly restrict files to be edited in the context of the plugin. This makes it possible with at…

  • Low 2.1

    Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials

    RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server …