Archive
June 2023
Vulnerabilities first published in this month (UTC), newest first.
2,424 results · Feed
-
Unscored —
Revolution Slider <= 6.6.12 - Author+ Remote Code Execution
The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.
-
Medium 5.4
Responsive Tabs For WPBakery Page Builder <= 1.1 - Contributor+ Stored XSS
The Responsive Tabs For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow user…
-
Medium 4.8
Custom Base Terms < 1.0.3 - Admin+ Stored XSS
The Custom Base Terms WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (…
-
Medium 4.8
Qubotchat < 1.1.6 – Admin+ Stored XSS
The QuBot WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example …
-
Medium 5.4
Google Map Shortcode <= 3.1.2 - Contributor+ Stored XSS
The Google Map Shortcode WordPress plugin through 3.1.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting att…
-
High 7.2
QueryWall: Plug'n Play Firewall <= 1.1.1 - Admin+ SQLi
The QueryWall: Plug'n Play Firewall WordPress plugin through 1.1.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.
-
Medium 4.8
AI ChatBot < 4.5.5 - Admin+ Stored Cross-Site Scripting
The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
-
High 7.2
WP Custom Cursors < 3.2 - Admin+ SQLi
The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin.
-
High 8.8
SupportCandy < 3.1.7 - Subscriber+ SQLi
The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the `id` parameter for an Agent in the REST API before using it in an SQL statement, leading to an SQL Injection exploitable by users with a role as low as Subscriber.
-
Medium 4.8
AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting
The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using…
-
Medium 4.8
File Renaming on Upload < 2.5.2 - Admin+ Stored Cross-Site Scripting
The File Renaming on Upload WordPress plugin before 2.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disall…
-
Medium 6.1
Super Socializer < 7.13.52 - Reflected XSS
The Social Share, Social Login and Social Comments WordPress plugin before 7.13.52 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users suc…
-
Critical 10.0
A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code exe…
-
Critical 9.8
Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that …
-
Unscored —
When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox…
-
Critical 9.8
An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior. This vulnerability aff…
-
High 7.5
The return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have potentially lead to a null…
-
Unscored —
Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed eviden…
-
Unscored —
The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts…
-
Medium 6.5
When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden…
-
Critical 9.1
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have …
-
High 7.5
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below vers…
-
Medium 6.5
Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing environment variable …
-
Critical 9.8
A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious fi…
-
Medium 5.5
A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the servic…
-
Critical 9.8
An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a poten…
-
Unscored —
Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla Fuzzing Team rep…
-
Unscored —
Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This atta…
-
Unscored —
Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately pri…
-
Unscored —
A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox < 113.
-
Unscored —
Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113.
-
Medium 6.5
Apache Airflow: Information disclosure on configuration view
In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations. This vulnerability is mitigated by the fact configuration is not shown in the UI by default (only if `[webserver] expose_config` is set to `non-sensitive-…
-
High 7.8
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on …
-
Medium 5.3
Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-pa…
-
High 7.8
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on …
-
Unscored —
Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may af…
-
High 7.5
nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability m…
-
High 7.5
JeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController.
-
Medium 5.3
Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-pa…
-
Medium 4.8
A stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows attackers to execute arbitrary web scripts o…