Archive
6 February 2023
Vulnerabilities first published on this day (UTC), newest first.
187 results · Feed
-
Medium 6.1CVE-2023-0236 Scanner template
Tutor LMS < 2.0.10 - Reflected Cross-Site Scripting
The Tutor LMS WordPress plugin before 2.0.10 does not sanitise and escape the reset_key and user_id parameters before outputting then back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
-
Critical 9.8CVE-2022-4681 Public exploit
Hide My WP < 6.2.9 - Unauthenticated SQLi
The Hide My WP WordPress plugin before 6.2.9 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
-
Medium 5.4
Clean Login < 1.13.7 - Contributor+ Stored XSS via Shortcode
The Clean Login WordPress plugin before 1.13.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks whic…
-
Medium 5.4
YourChannel: Everything you want in a YouTube plugin < 1.2.3 - Contributor+ Stored XSS via Shortcode
The YourChannel: Everything you want in a YouTube plugin WordPress plugin before 1.2.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform …
-
Medium 5.4
WP-ShowHide < 1.05 - Contributor+ Stored XSS via Shortcode
The WP-ShowHide WordPress plugin before 1.05 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which …
-
Medium 5.4
Send PDF for Contact Form 7 < 0.9.9.2 - Contributor+ Stored XSS via Shortcode
The Send PDF for Contact Form 7 WordPress plugin before 0.9.9.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scrip…
-
Medium 6.5
Stream < 3.9.2 - Subscriber+ Alert Creation
The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers) from using its alert creation functionality, which may enable them to leak sensitive information.
-
Medium 5.4
Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode
The Strong Testimonials WordPress plugin before 3.0.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attac…
-
Medium 5.4
WP VR < 8.2.7 - Contributor+ Stored XSS
The WP VR WordPress plugin before 8.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-…
-
Medium 5.4
YouTube Channel < 3.23.0 - Contributor+ Stored XSS via Shortcode
The My YouTube Channel WordPress plugin before 3.23.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attac…
-
Medium 5.4
ResponsiveVoice Text To Speech < 1.7.7 - Contributor+ Stored XSS
The ResponsiveVoice Text To Speech WordPress plugin before 1.7.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above…
-
Medium 5.4
Logo Slider < 3.6.0 - Contributor+ Stored XSS in Shortcode
The Logo Slider WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored …
-
Medium 5.4
GamiPress – Vimeo integration < 1.0.9 - Contributor+ Stored XSS
The GamiPress WordPress plugin before 1.0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cr…
-
Medium 5.4
WP Blog and Widget < 2.3.1 - Contributor+ Stored XSS via Shortcode
The WP Blog and Widgets WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attac…
-
Medium 5.4
Easy Testimonials < 3.9.3 - Contributor+ Stored XSS
The Easy Testimonials WordPress plugin before 3.9.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks…
-
Medium 5.4
Annual Archive < 1.6.0 - Contributor+ Stored XSS
The Annual Archive WordPress plugin before 1.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stor…
-
Low 2.0
Nexcloud Mail app temporarily stores cleartext password in database
Nextcloud mail is an email app for the nextcloud home server platform. In versions prior to 2.2.2 user's passwords were stored in cleartext in the database during the duration of OAuth2 setup procedure. Any attacker or malicious user with access to the databa…
-
High 7.2
Fortra GoAnywhere MFT License Response Servlet Command Injection
Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.
KEV Feb 10, 2023 -
Medium 6.7
Uncontrolled search path in the Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows b…
-
Medium 6.0
Improper buffer restrictions in the Intel(R) C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Tool…
-
High 7.8
Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 and Intel C++ Compiler Classi…
-
Medium 5.0
SourceCodester Online Eyewear Shop HTTP POST Request update_cart sql injection
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects the function update_cart of the file /oews/classes/Master.php?f=update_cart of the component HTTP POST Request Handler. The manipulation of t…
-
Low 3.5
eXo Chat Application Mention ExoChatMessageComposer.vue cross site scripting
A vulnerability classified as problematic has been found in eXo Chat Application. Affected is an unknown function of the file application/src/main/webapp/vue-app/components/ExoChatMessageComposer.vue of the component Mention Handler. The manipulation leads to…
-
Medium 5.4
0mk Shortener <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The 0mk Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on the zeromk_options_page function. This makes it possible for unauthenticated atta…
-
Medium 4.3
paxswill EVE Ship Replacement Program User Information api.py information disclosure
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the component User Information Handler. The manipulation leads to i…
-
Medium 5.0
SourceCodester Canteen Management System removeUser.php sql injection
A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file removeUser.php. The manipulation of the argument id leads to sql injection. The attack m…
-
Medium 4.7
WordPress Afterpay Gateway for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Afterpay Gateway for WooCommerce <= 3.5.0 versions.
-
Medium 4.7
WordPress WZone – Lite Version Plugin <= 3.1 Lite is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF) vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions.
-
Medium 5.5
In gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 6.3
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
-
Medium 5.5
In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to loca…
-
Medium 5.0
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
-
Medium 5.7
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
-
Medium 5.7
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
-
Medium 4.8
In bluetooth driver, there is a missing permission check. This could lead to local information disclosure with no addit…
-
Medium 6.4
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 6.4
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 5.7
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 5.7
In wlan driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial o…
-
Medium 5.5
In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check. This could lead to lo…