1 January 2023

23 results · Feed

• Medium 5.5
  CVE-2021-4297

  trampgeek jobe Restapi.php runs_post Privilege Escalation

  A vulnerability has been found in trampgeek jobe up to 1.6.4 and classified as problematic. This vulnerability affects the function runs_post of the file application/controllers/Restapi.php. The manipulation of the argument sourcefilename leads to an unknown …

  trampgeek jobe
  Jan 1, 2023
• Low 3.5
  CVE-2015-10006

  admont28 Ingnovarq insertarSliderAjax.php cross site scripting

  A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site…

  admont28 Ingnovarq
  Jan 1, 2023
• Low 2.6
  CVE-2013-10006

  Ziftr primecoin bitcoinrpc.cpp HTTPAuthorized timing discrepancy

  A vulnerability classified as problematic was found in Ziftr primecoin up to 0.8.4rc1. Affected by this vulnerability is the function HTTPAuthorized of the file src/bitcoinrpc.cpp. The manipulation of the argument strUserPass/strRPCUserColonPass leads to obse…

  Ziftr primecoin
  Jan 1, 2023
• Low 3.1
  CVE-2010-10002

  SimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php cross site scripting

  ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-module-openid. Affected is an unknown function of the file templates/consumer.php of the component OpenID Handler. The manipulation of the …

  simplesamlphp simplesamlphp-module-openid simplesamlphp/simplesamlphp-module-openid Packagist
  Jan 1, 2023
• Medium 5.3
  CVE-2023-0029

  Multilaser RE708 Telnet Service denial of service

  A vulnerability was found in Multilaser RE708 RE1200R4GC-2T2R-V3_v3411b_MUL029B. It has been rated as problematic. This issue affects some unknown processing of the component Telnet Service. The manipulation leads to denial of service. The attack may be initi…

  Multilaser RE708
  Jan 1, 2023
• Medium 6.3
  CVE-2014-125030

  taoeffect Empress hard-coded password

  A vulnerability, which was classified as critical, has been found in taoeffect Empress. Affected by this issue is some unknown functionality. The manipulation leads to use of hard-coded password. The patch is identified as 557e177d8a309d6f0f26de46efb38d43e000…

  taoeffect Empress
  Jan 1, 2023
• Low 3.5
  CVE-2018-25063

  Zenoss Dashboard defaultportlets.js cross site scripting

  A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTM…

  Zenoss Dashboard
  Jan 1, 2023
• Low 3.5
  CVE-2018-25062

  flar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of service

  A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x on Nexus 9. Affected is the function xfrm_dump_policy_done of the file net/xfrm/xfrm_user.c of the component ipsec. The manipulation leads to denial of service. Upgrading t…

  flar2 ElementalX
  Jan 1, 2023
• Medium 5.7
  CVE-2023-0028 EPSS 56%

  Cross-site Scripting (XSS) - Stored in linagora/twake

  Cross-site Scripting (XSS) - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+.

  LINAGORA linagora/twake
  Jan 1, 2023
• High 7.5
  CVE-2023-22551 Public exploit

  The FTP (aka "Implementation of a simple FTP client and server") project through 96c1a35 allows remote attackers to cau…

  Jan 1, 2023
• Critical 9.0
  CVE-2022-34322

  Multiple XSS issues were discovered in Sage Enterprise Intelligence 2021 R1.1 that allow an attacker to execute JavaScr…

  Jan 1, 2023
• High 8.8
  CVE-2022-34324 EPSS 12%

  Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data…

  Jan 1, 2023
• Medium 5.4
  CVE-2022-34323

  Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript…

  Jan 1, 2023
• Critical 9.8
  CVE-2022-48198

  The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who cont…

  Jan 1, 2023
• Medium 5.3
  CVE-2022-45213

  perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL.

  Jan 1, 2023
• Medium 5.3
  CVE-2022-45027

  perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determi…

  Jan 1, 2023
• Medium 4.8
  CVE-2022-40711

  PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can…

  Jan 1, 2023
• High 7.5
  CVE-2022-37785

  An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the configuration for terminal p…

  Jan 1, 2023
• Medium 6.3
  CVE-2022-37786

  An issue was discovered in WeCube Platform 3.2.2. There are multiple CSV injection issues: the [Home / Admin / Resource…

  Jan 1, 2023
• Medium 6.1
  CVE-2022-37787

  An issue was discovered in WeCube platform 3.2.2. A DOM XSS vulnerability has been found on the plugin database executi…

  Jan 1, 2023
• High 8.1
  CVE-2022-47634

  M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access a…

  Jan 1, 2023
• Low 3.3
  CVE-2022-47952 Public exploit

  lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists,…

  lxc lxc lxc Debian Ubuntu Alpine
  Jan 1, 2023
• Medium 6.1
  CVE-2021-41823

  The Web Application Firewall (WAF) in Kemp LoadMaster 7.2.54.1 allows certain uses of onmouseover to bypass an XSS prot…

  Jan 1, 2023