Archive
23 June 2023
Vulnerabilities first published on this day (UTC), newest first.
192 results · Feed
-
High 7.5
WordPress MStore API Plugin <= 3.9.7 is vulnerable to SQL Injection
Unauth. SQL Injection (SQLi) vulnerability in InspireUI MStore API plugin <= 3.9.7 versions.
-
Medium 4.6
WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.7 is vulnerable to Insecure Direct Object References (IDOR)
Authorization Bypass Through User-Controlled Key vulnerability in JS Help Desk js-support-ticket allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk: from n/a through 2.7.7.
-
Medium 5.9
WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.
-
Medium 5.9
WordPress CRM Memberships Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NTZApps CRM Memberships plugin <= 1.6 versions.
-
High 7.1
WordPress The7 Theme <= 11.6.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dream-Theme The7 plugin <= 11.6.0 versions.
-
Medium 5.9
WordPress Password Protected Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPExperts Password Protected plugin <= 2.6.2 versions.
-
Medium 5.9
WordPress Booking and Rental Manager Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Booking and Rental Manager for Bike plugin <= 1.2.1 versions.
-
High 7.1
WordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.29 versions.
-
High 7.1
WordPress Premium Addons PRO Plugin <= 2.8.24 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Premium Addons for Elementor Premium Addons PRO plugin <= 2.8.24 versions.
-
Medium 6.7
Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Wind…
-
Low 3.5
Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit t…
-
Medium 6.8
Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exp…
-
High 8.2
Dell BIOS contains an improper authentication vulnerability. A locally authenticated malicious user may potentially exp…
-
Medium 6.3
Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on…
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 6.3
SourceCodester Game Result Matrix System GET Parameter athlete-profile.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Game Result Matrix System 1.0. This affects an unknown part of the file /dipam/athlete-profile.php of the component GET Parameter Handler. The manipulation of the argument id leads…
-
Low 3.5
SourceCodester Game Result Matrix System GET Parameter save-delegates.php cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipu…
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Low 3.5
SourceCodester Online School Fees System GET Parameter datatable.php cross site scripting
A vulnerability classified as problematic was found in SourceCodester Online School Fees System 1.0. Affected by this vulnerability is an unknown functionality of the file /paysystem/datatable.php of the component GET Parameter Handler. The manipulation of th…
-
Medium 4.7CVE-2023-3380 Scanner template
Wavlink WN579X3 Ping Test adm.cgi injection
A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to lau…
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …
-
Medium 5.1
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator …