Archive
March 2023
Vulnerabilities first published in this month (UTC), newest first.
1,048 results · Clear filters · Feed
-
Medium 6.3
UpThemes Theme DesignFolio Plus unrestricted upload
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in UpThemes Theme DesignFolio Plus 1.2 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to unrestricted upload. The at…
-
Medium 6.5
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read
The Plus Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in versions up to, and including 4.1.9 (pro) and 2.0.6 (free). The plugin has a feature to add an "Info Box" to an Elementor created page. This Info Box can include an SV…
-
Medium 4.3
JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure
The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to sensitive information disclosure in versions up to, and including, 1.4.0 due to a lack of proper capability checking on the backup_guard_get_manual_modal function called via an…
-
Medium 5.4
JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Change
The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to unauthorized back-up location changes in versions up to, and including 1.4.1 due to a lack of proper capability checking on the backup_guard_cloud_dropbox, backup_guard_cloud_g…
-
Medium 6.1
XSS in UBIT Information Technologies Student Information Management System
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in UBIT Information Technologies Student Information Management System. This issue affects Student Information Management System: before 20211126.
-
Medium 6.1
XSS in UBIT Information Technologies Student Information Management System
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in UBIT Information Technologies Student Information Management System. This issue affects Student Information Management System: before 20211126.
-
Medium 5.9
Stack based buffer overflow in Core
Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.
-
Medium 6.7
Use after free in WLAN
Memory corruption in WLAN due to use after free
-
Medium 6.2
Information Exposure in Graphics
Information Disclosure in Graphics during GPU context switch.
-
Medium 5.5
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local denial of service in telephone serv…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local denial of service in telephone serv…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local denial of service in telephone serv…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local denial of service in telephone serv…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local information disclosure with no addi…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local information disclosure with no addi…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local information disclosure with no addi…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local information disclosure with no addi…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local information disclosure with no addi…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local information disclosure with no addi…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local information disclosure with no addi…
-
Medium 6.6
NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.
-
Medium 6.0
Cross-site Scripting (XSS) - Reflected in answerdev/answer
Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.
-
Medium 6.0
Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
-
Medium 4.3
Information disclosure vulnerability exists in pg_ivm versions prior to 1.5.1. An Incrementally Maintainable Materializ…
-
Medium 5.4
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group modul…
-
Medium 4.8
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrato…
-
Medium 6.7
In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Medium 6.7
In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Medium 6.7
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 4.4
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…
-
Medium 4.4
In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local informat…
-
Medium 6.7
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 4.4
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…
-
Medium 4.4
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…
-
Medium 6.7
In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of …
-
Medium 6.7
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalat…