Archive
January 2023
Vulnerabilities first published in this month (UTC), newest first.
2,382 results · Feed
-
High 7.8
Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive inf…
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to ex…
-
High 7.5
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnera…
-
Critical 9.8
Netcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF with XXE (remote).
-
Critical 9.8
i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php.
-
Critical 9.8
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Inco…
-
Critical 9.8
SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter.
-
Medium 6.1
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cros…
-
Critical 9.8
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnera…
-
Medium 6.1
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cros…
-
Critical 9.8
Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary…
-
Medium 5.3
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could a…
-
Medium 5.7
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configura…
-
Medium 6.7
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does…
-
High 7.5
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple at…
-
High 7.2
An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permi…
-
Low 2.7
The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal servic…
-
High 7.8
HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being r…
-
High 7.8
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privileg…
-
High 7.8
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privileg…
-
High 7.8
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privileg…
-
High 7.2
A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cau…
-
Medium 6.7
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated pri…
-
High 7.8
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrar…
-
Medium 4.4
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may…
-
Medium 4.4
An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker w…
-
Medium 4.4
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker …
-
High 7.8
Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which m…
-
High 7.8
Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which m…
-
High 7.0
A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC produ…
-
Medium 5.4
RSS Aggregator by Feedzy < 4.1.1 - Contributor+ Stored XSS
The RSS Aggregator by Feedzy WordPress plugin before 4.1.1 does not validate and escape some of its block options before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks…
-
Medium 5.4
PixCodes < 2.3.7 - Contributor+ Stored XSS in Shortcode
The PixCodes WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which co…
-
Medium 6.4
Widgets for Google Reviews < 9.8 - Contributor+ Stored XSS
The Widgets for Google Reviews WordPress plugin before 9.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting …
-
Medium 5.4
Icon Widget < 1.3.0 - Contributor+ Stored XSS via Shortcode
The Icon Widget WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which…
-
Medium 5.4
Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 - Contributor+ Stored XSS via Shortcode
The Custom User Profile Fields for User Registration WordPress plugin before 1.8.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stor…
-
Medium 5.4
Justified Gallery < 1.7.1 - Contributor+ Stored XSS via Shortcode
The Justified Gallery WordPress plugin before 1.7.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
-
Medium 5.4
PDF Viewer < 1.0.0 - Contributor+ Stored XSS via Shortcode
The PDF Viewer WordPress plugin before 1.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
-
Medium 5.4
Accordion Shortcodes <= 2.4.2 - Contributor+ Stored XSS via Shortcode
The Accordion Shortcodes WordPress plugin through 2.4.2 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
-
Medium 6.1
FL3R FeelBox <= 8.1 - Settings Update via CSRF to Stored XSS
The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
-
Medium 5.4
Portfolio for Elementor, Image Gallery & Post Grid | PowerFolio < 2.3.1 - Contributor+ Stored XSS via Shortcode
The Portfolio for Elementor WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting a…