Archive
20 April 2023
Vulnerabilities first published on this day (UTC), newest first.
23 results · Clear filters · Feed
-
Medium 6.5
Cross Site Request Forgery due to missing nonce verification in form block
Form block is a wordpress plugin designed to make form creation easier. Versions prior to 1.0.2 are subject to a Cross-Site Request Forgery due to a missing nonce check. There is potential for a Cross Site Request Forgery for all form blocks, since it allows …
-
Medium 5.3
Bypass of CSRF protection in the presence of predictable userInfo in @fastify/csrf-protection
@fastify/csrf-protection is a plugin which helps protect Fastify servers against CSRF attacks. The CSRF protection enforced by the @fastify/csrf-protection library in combination with @fastify/cookie can be bypassed from network and same-site attackers under …
-
Medium 5.9
Cross-site Scripting (XSS) through the name of a color of select box values in tuleap
Tuleap is a Free & Source tool for end to end traceability of application and system developments. Affected versions are subject to a cross site scripting attack which can be injected in the name of a color of select box values of a tracker and then reflected…
-
Medium 5.9
Input buffer over-read in AES-XTS implementation on 64 bit ARM
Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer, leading to a crash. Impact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM platform ca…
-
Medium 4.3
Apache DolphinScheduler 3.0.0 to 3.1.1 python gateway has improper authentication
On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version…
-
Medium 6.1
Reflected Cross Site Scripting (XSS)
Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4.
-
Medium 4.3CVE-2023-1767 Public exploit
The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature …
-
Medium 6.5
Oauth authorization codes do not expire when deauthorizing an oauth2 app
Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessing an authorization code to generate an access token.
-
Medium 6.5
Uncontrolled Resource Consuption in M-Files Server
User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job.
-
Medium 6.3
I Recommend This Plugin dot-irecommendthis.php sql injection
A vulnerability has been found in I Recommend This Plugin up to 3.7.2 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality of the file dot-irecommendthis.php. The manipulation leads to sql injection. The attack c…
-
Medium 4.3CVE-2023-28458 Public exploit
pretalx allows path traversal in HTML export
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.
-
Medium 6.5CVE-2023-28459 Public exploit
pretalx vulnerable to path traversal in HTML export
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload crafted HTML documents that trigger the reading of arbitrary files.
-
Medium 5.5
An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges cause a denial of ser…
-
Medium 5.4
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Son…
-
Medium 5.4
Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via…
-
Medium 5.4
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Son…
-
Medium 5.5
A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If …
-
Medium 6.7
An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->bl…
-
Medium 5.3
An issue was discovered in ONOS 2.5.1. An intent with the same source and destination shows the INSTALLING state, indic…
-
Medium 5.3
An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by intents. An existing inte…
-
Medium 6.5
An issue was discovered in ONOS 2.5.1. To attack an intent installed by a normal user, a remote attacker can install a …
-
Medium 6.5
An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed by intents. A remote at…
-
Medium 5.3
An issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email addresses and user entered…