Archive
5 December 2022
Vulnerabilities first published on this day (UTC), newest first.
56 results · Clear filters · Feed
-
Medium —
hyper-staticfile's improper validation of Windows paths could lead to directory traversal attack
Path resolution in `hyper-staticfile` didn't correctly validate Windows paths, meaning paths like `/foo/bar/c:/windows/web/screen/img101.png` would be allowed and respond with the contents of `c:/windows/web/screen/img101.png`. Thus users could potentially re…
-
Medium 4.4
Out of Bounds Read in OpenRazer Driver
OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the `razer_attr_read_dpi_stages`, potentially bypassing KASLR. To ex…
-
Medium 4.8
WPUpper Share Buttons <= 3.42 - Admin+ Stored XSS
The WPUpper Share Buttons WordPress plugin through 3.42 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallow…
-
Medium 6.5
WP OAuth Server < 3.4.2 - Client Secret Regeneration via CSRF
The WP OAuth Server (OAuth Authentication) WordPress plugin before 3.4.2 does not have CSRF check when regenerating secrets, which could allow attackers to make logged in admins regenerate the secret of an arbitrary client given they know the client ID
-
Medium 4.8
Advanced WP Columns <= 2.0.6 - Admin+ Stored Cross-Site Scripting
The Advanced WP Columns WordPress plugin through 2.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowe…
-
Medium 4.8
WP Page Builder <= 1.2.8 - Admin+ Stored Cross-Site
The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (f…
-
Medium 4.8
WP OAuth Server < 4.2.2 - Admin+ Stored XSS
The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.2 does not sanitize and escape Client IDs, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is d…
-
Medium 4.8
Uji Countdown < 2.3.1 - Admin+ Stored XSS
The Uji Countdown WordPress plugin before 2.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for …
-
Medium 6.5
Advanced Import < 1.3.8 - Arbitrary Plugin Installation & Activation via CSRF
The Advanced Import WordPress plugin before 1.3.8 does not have CSRF check when installing and activating plugins, which could allow attackers to make a logged in admin install arbitrary plugins from WordPress.org, and activate arbitrary ones from the blog vi…
-
Medium 4.8
Add Comments <= 1.0.1 - Admin+ Stored XSS
The Add Comments WordPress plugin through 1.0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for …
-
Medium 5.4
WordPress Advanced Booking Calendar Plugin <= 1.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress.
-
Medium 6.5
The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated wi…
-
Medium 6.8
Floating Point Comparison with Incorrect Operator in vim/vim
Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
-
Medium 6.3
Facepay camera.php authorization
A vulnerability has been found in Facepay 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /face-recognition-php/facepay-master/camera.php. The manipulation of the argument userId leads to authorization by…
-
Medium 5.5
A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirec…
-
Medium 4.7
SpringBootCMS Template Management injection
A vulnerability was found in SpringBootCMS and classified as critical. Affected by this issue is some unknown functionality of the component Template Management. The manipulation leads to injection. The attack may be launched remotely. The exploit has been di…
-
Medium 6.7
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat…
-
Medium 6.7
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat…
-
Medium 6.7
In Wi-Fi, there is a possible memory access violation due to a logic error. This could lead to local escalation of priv…
-
Medium 6.7
In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of priv…
-
Medium 6.4
In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privile…
-
Medium 6.7
In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead …
-
Medium 6.7
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat…
-
Medium 6.7
In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati…
-
Medium 6.7
In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege wi…
-
Medium 6.7
In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation…
-
Medium 6.7
In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation…
-
Medium 6.7
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat…
-
Medium 6.7
In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead …
-
Medium 6.7
In keyinstall, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escal…
-
Medium 6.7
In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati…
-
Medium 6.7
In ccci, there is a possible out of bounds write due to improper input validation. This could lead to local escalation …
-
Medium 5.1
Telepad allows an attacker (in a man-in-the-middle position between the server and a connected device) to see all data …
-
Medium 6.4
Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerab…
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in ClicShopping_V3 v3.402 allows attackers to execute arbitrary web scripts …
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attacke…
-
Medium 6.5
ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an …
-
Medium 6.5
Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may al…