Archive
10 May 2023
Vulnerabilities first published on this day (UTC), newest first.
56 results · Clear filters · Feed
-
High 8.0
OS Command Injection vulnerability in Western Digital My Cloud devices
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that was caused by a command that read files from a privileged location and created a system command without sanitizing the read data. This command could …
-
High 8.0
Storing Passwords in a Recoverable Format
A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11…
-
High 8.6
An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00.…
-
High 8.8
Uncontrolled search path in the WULT software maintained by Intel(R) before version 1.0.0 (commit id 592300b) may allow…
-
High 7.5
Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user t…
-
High 8.2
Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may…
-
High 7.5
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …
-
High 8.2
Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated us…
-
High 7.2
Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow a privileg…
-
High 8.2
Improper access control in the Intel(R) SUR software before version 2.4.8989 may allow an authenticated user to potenti…
-
High 8.8
Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow an authent…
-
High 8.2
Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user…
-
High 7.9
Out of bounds write in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enabl…
-
High 8.2
Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow …
-
High 8.2
Buffer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable es…
-
High 7.1
Improper access control in the Intel(R) Retail Edge Mobile iOS application before version 3.4.7 may allow an authentica…
-
High 8.4
Out-of-bounds write in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticat…
-
High 7.8
Use after free in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially e…
-
High 7.2
Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation …
-
High 7.2
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalatio…
-
High 7.5
Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalat…
-
High 7.5
Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, …
-
High 7.5
Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC…
-
High 7.8
Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published D…
-
High 8.8
Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linu…
-
High 7.1
WordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fugu Maintenance Switch plugin <= 1.5.2 versions.
-
High 7.1
WordPress Mass Email To users Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Mass Email To users plugin <= 1.1.4 versions.
-
High 7.1
WordPress Charitable Plugin <= 1.7.0.10 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Charitable Donations & Fundraising Team Donation Forms by Charitable plugin <= 1.7.0.10 versions.
-
High 7.1
WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Maui Marketing Update Image Tag Alt Attribute plugin <= 2.4.5 versions.
-
High 7.1
WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Viable Blog theme <= 1.1.4 versions.
-
High 7.1
WordPress Betheme Theme <= 26.7.5 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Muffingroup Betheme theme <= 26.7.5 versions.
-
High 7.1
WordPress Full Width Banner Slider Wp Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin <= 1.1.7 versions.
-
High 7.1
WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5 versions.
-
High 7.5
m.static Directory Traversal vulnerability
All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function.
-
High 7.2
An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The Inf…
-
High 7.2
An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The VIO…
-
High 8.8CVE-2023-29930 Public exploit
An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execut…
-
High 7.8
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component ecma_builtin_typeda…
-
High 7.8
Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_iden…
-
High 8.8
Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4.