27 January 2023

8 results · Clear filters · Feed

• Critical 9.8
  CVE-2023-0556

  ContentStudio <= 1.2.5 - Missing Authorization

  The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to obtain the blog metadata (via …

  contentstudio Contentstudio Web / CMS
  Jan 27, 2023
• Critical 9.1
  CVE-2022-39811

  Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui/advancedsettings.jsp and NMSCIWebG…

  Jan 27, 2023
• Critical 9.8
  CVE-2022-48011

  Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewer…

  Jan 27, 2023
• Critical 9.8
  CVE-2022-48066

  An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a cra…

  Jan 27, 2023
• Critical 9.8
  CVE-2022-48008

  An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrar…

  Jan 27, 2023
• Critical 9.8
  CVE-2022-48107

  D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /setnetworksetti…

  Jan 27, 2023
• Critical 9.8
  CVE-2022-48108

  D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSetti…

  Jan 27, 2023
• Critical 9.8
  CVE-2022-44298

  SiteServer CMS 7.1.3 is vulnerable to SQL Injection.

  Jan 27, 2023