Archive
30 May 2023
Vulnerabilities first published on this day (UTC), newest first.
55 results · Clear filters · Feed
-
High 8.9
Leantime Stored Cross-site Scripting Vulnerability
Leantime is a lean open source project management system. Starting in version 2.3.21, an authenticated user with commenting privileges can inject malicious Javascript into a comment. Once the malicious comment is loaded in the browser by a user, the malicious…
-
High 7.8
Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker t…
-
High 8.8CVE-2023-2935 EPSS 24%
Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corr…
-
High 8.8CVE-2023-2936 EPSS 23%
Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corr…
-
High 8.8
Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially ex…
-
High 8.8
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap cor…
-
High 8.8
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap cor…
-
High 8.8
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap cor…
-
High 8.8
Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to instal…
-
High 8.8
Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exp…
-
High 7.5
IBM GSKit information disclosure
IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerabili…
-
High 8.8CVE-2023-33177 Public exploit
Xibo CMS vulnerable to Remote Code Execution through Zip Slip
Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be uploaded to the CMS via the layout import function by an authenticated user which would allow creation of files outsid…
-
High 8.8
Excessive permissions for ckan user
CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the `ckan` user (equivalent to www-data) owned code and configuration files in the docker container and the `ckan` user had the permissi…
-
High 7.5
Undefined variable usage in npm package "proxy" leads to remote denial of service
A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.
-
High 7.5
RIOT-OS vulnerable to Race Condition in SFR Timeout
RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send multiple crafted frames to the device to trigger a race condition. The …
-
High 7.5
RIOT-OS vulnerable to NULL pointer dereference during NHC encoding
RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send a crafted frame which is forwarded by the device. During encoding of th…
-
High 7.5
[20230502] - Core - Bruteforce prevention within the mfa screen
An issue was discovered in Joomla! 4.2.0 through 4.3.1. The lack of rate limiting allowed brute force attacks against MFA methods.
-
High 7.5
RIOT-OS vulnerable to NULL pointer dereference in gnrc_pktbuf_mark
RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.04, an attacker can send a crafted frame to the device to trigger a NULL pointer dereference leading …
-
High 7.5
RIOT-OS vulnerable to Out of Bounds write in routing with SRH
RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.04, an attacker can send a crafted frame to the device resulting in an integer underflow and out of b…
-
High 7.0
PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains Insecure File and Folder Permissions vulnerability. A regular u…
-
High 7.2
Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration
Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection. In order to exploit this weakness, a user would already need elevated permissions (Op or Admin) to…
-
High 8.8
Newsletter Popup <= 1.2 - Record Deletion via CSRF
The Newsletter Popup WordPress plugin through 1.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks as the wp_newsletter_show_localrecord page is not protected with a nonce.
-
High 8.8CVE-2023-2288 EPSS 18%
Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization
The Otter WordPress plugin before 2.2.6 does not sanitize some user-controlled file paths before performing file operations on them. This leads to a PHAR deserialization vulnerability on PHP < 8.0 using the phar:// stream wrapper.
-
High 8.8
WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF
The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue
-
High 7.2CVE-2023-0329 EPSS 20%
Elementor Website Builder < 3.12.2 - Admin+ SQLi
The Elementor Website Builder WordPress plugin before 3.12.2 does not properly sanitize and escape the Replace URL parameter in the Tools module before using it in a SQL statement, leading to a SQL injection exploitable by users with the Administrator role.
-
High 7.8
Apache Cassandra: Privilege escalation when enabling FQL/Audit logs
Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1. WORKAROUND The vulnerability …
-
High 8.2
Cross-site scripting vulnerability in Zulip Server development branch via topic tooltip
Zulip is an open-source team collaboration tool with unique topic-based threading that combines the best of email and chat to make remote work productive and delightful. The main development branch of Zulip Server from May 2, 2023 and later, including beta ve…
-
High 7.5
Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is…
-
High 7.1
nfpm vulnerable to Incorrect Default Permissions
nFPM is an alternative to fpm. The file permissions on the checked-in files were not maintained. Hence, when nfpm packaged the files (without extra config for enforcing it’s own permissions) files could go out with bad permissions (chmod 666 or 777). Anyone u…
-
High 7.8
A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:v…
-
High 8.8
Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code executio…
-
High 7.5
Incorrect access control in luowice v3.5.18 allows attackers to access cloud source code information via modification f…
-
High 7.5
Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device.
-
High 7.4
An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery syste…
-
High 7.3
An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for a remote attacker to communicate …
-
High 7.1
An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unaut…
-
High 8.8
An issue was discovered in Faronics Insight 10.0.19045 on Windows. An unauthenticated attacker is able to upload any ty…
-
High 7.4
An issue was discovered in Faronics Insight 10.0.19045 on Windows. A suitably positioned attacker could perform a man-i…
-
High 8.8
An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a crafted p…
-
High 7.5
An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service atta…