Archive
3 January 2023
Vulnerabilities first published on this day (UTC), newest first.
94 results · Feed
-
Medium 4.3
IBM Business Automation Workflow cross-site request forgery
IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
-
Medium 6.5
Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not suff…
-
Medium 5.5
A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance acces…
-
Medium 5.7
A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privilege…
-
High 7.2
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …
-
High 7.2
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …
-
Medium 4.3
Spinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer builds
Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes, and Spinnaker's Rosco microservice produces machine images. Rosco prior to versions 1.29.2, 1.28.4, and 1.27.3 does not property mask secrets generated via p…
-
High 7.2
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …
-
High 7.8
A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate the…
-
High 7.8
A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their u…
-
High 7.8
A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their u…
-
High 8.0
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote a…
-
High 8.8
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote a…
-
High 8.8
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote a…
-
High 8.8
A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote low-privi…
-
High 7.2
A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authentic…
-
Medium 4.6
A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remot…
-
Medium 4.8
Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a mu…
-
Medium 6.1
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could a…
-
Medium 6.1
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could a…
-
Medium 6.1
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could a…
-
High 8.7
A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authe…
-
High 8.8
Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow…
-
High 8.8
Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow…
-
High 8.8
Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow…
-
High 8.8
Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow…
-
High 8.8
Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow…
-
Medium 6.8
A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerabi…
-
High 7.3
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulner…
-
Medium 6.1
ViewVC XSS vulnerability in revision view changed paths
ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit …
-
High 7.5
Apache Tomcat: JsonErrorReportValve escaping
The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to s…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC versi…
-
Medium 5.3
An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In For…
-
Medium 6.6
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0 thr…
-
High 7.6
Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CW…
-
High 7.2
Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting
The "Survey Maker – Best WordPress Survey Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via survey answers in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible f…
-
Medium 5.5
Members Import <= 1.4.2 - Self Cross-Site Scripting
The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the user_login parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible …
-
Low 3.5
ahmyi RivetTracker cross site scripting
A vulnerability, which was classified as problematic, has been found in ahmyi RivetTracker. This issue affects some unknown processing. The manipulation of the argument $_SERVER['PHP_SELF'] leads to cross site scripting. The attack may be initiated remotely. …
-
Medium 4.7
ummmmm nflpick-em.com LoadUsers.php _Load_Users sql injection
A vulnerability classified as problematic was found in ummmmm nflpick-em.com up to 2.2.x. This vulnerability affects the function _Load_Users of the file html/includes/runtime/admin/JSON/LoadUsers.php. The manipulation of the argument sort leads to sql inject…
-
Medium 5.3
ethitter WP-Print-Friendly wp-print-friendly.php information disclosure
A vulnerability classified as problematic has been found in ethitter WP-Print-Friendly up to 0.5.2. This affects an unknown part of the file wp-print-friendly.php. The manipulation leads to information disclosure. It is possible to initiate the attack remotel…