Archive
6 July 2023
Vulnerabilities first published on this day (UTC), newest first.
204 results · Feed
-
High 8.8
PiiGAB M-Bus Cross-Site Request Forgery
PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that …
-
High 7.5
PiiGAB M-Bus Use of Password Hash With Insufficient Computational Effort
PiiGAB M-Bus stores passwords using a weak hash algorithm.
-
High 7.5
PiiGAB M-Bus Weak Password Requirements
There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines.
-
High 8.0
PiiGAB M-Bus Cross-site Scripting
PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks.
-
Medium 6.5
PiiGAB M-Bus Plaintext Storage of a Password
PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.
-
Critical 9.8
PiiGAB M-Bus Use of Hard-coded Credentials
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.
-
High 7.5
PiiGAB M-Bus Unprotected Transport of Credentials
PiiGAB M-Bus transmits credentials in plaintext format.
-
Medium 5.9
PiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts
The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication.
-
High 8.8
PiiGAB M-Bus Code Injection
PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands.
-
Unscored —
VMware SD-WAN (Edge) contains a bypass authentication vulnerability. An unauthenticated attacker can download the Diagn…
-
Medium 6.8
Sentry CORS misconfiguration vulnerability
Sentry is an error tracking and performance monitoring platform. Starting in version 23.6.0 and prior to version 23.6.2, the Sentry API incorrectly returns the `access-control-allow-credentials: true` HTTP header if the `Origin` request header ends with the `…
-
Medium 6.1
yt-dlp File Downloader cookie leak
yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments diffe…
-
High 8.1
Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
-
Medium 5.4
Mastodon's verified profile links can be formatted in a misleading way
Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 2.6.0 and prior to versions 3.5.9, 4.0.5, and 4.1.3, an attacker can craft a verified profile link using specific formatting to conceal arbitrary parts of the link…
-
High 7.5
Mastodon vulnerable to Denial of Service through slow HTTP responses
Mastodon is a free, open-source social network server based on ActivityPub. When performing outgoing HTTP queries, Mastodon sets a timeout on individual read operations. Prior to versions 3.5.9, 4.0.5, and 4.1.3, a malicious server can indefinitely extend the…
-
Critical 10.0CVE-2023-36460 EPSS 40%
Mastodon vulnerable to arbitrary file creation through media attachments
Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 3.5.0 and prior to versions 3.5.9, 4.0.5, and 4.1.3, attackers using carefully crafted media files can cause Mastodon's media processing code to create arbitrary f…
-
Medium 5.3
Rotem Dynamics Rotem CRM OTP URI Interface information exposure
A vulnerability classified as problematic has been found in Rotem Dynamics Rotem CRM up to 20230729. This affects an unknown part of the file /LandingPages/api/otp/send?id=[ID][ampersand]method=sms of the component OTP URI Interface. The manipulation leads to…
-
Critical 9.3
Mastodon vulnerable to Cross-site Scripting through oEmbed preview cards
Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 1.3 and prior to versions 3.5.9, 4.0.5, and 4.1.3, an attacker using carefully crafted oEmbed data can bypass the HTML sanitization performed by Mastodon and inclu…
-
High 8.3
Authentik lacks Proxy IP headers validation
authentik is an open-source Identity Provider. Prior to versions 2023.4.3 and 2023.5.5, authentik does not verify the source of the X-Forwarded-For and X-Real-IP headers, both in the Python code and the go code. Only authentik setups that are directly accessi…
-
Medium 6.3
ThinuTech ThinuCMS category.php sql injection
A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument cat_id leads to sql injection. The attack may be launched remo…
-
Medium 4.3
ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was…
-
Medium —
@vendure/admin-ui-plugin authenticated Cross-site Scripting vulnerability
### Impact Vendure provides an authorization system with different levels of privileges. For example, an administrator cannot create another administrator. In the admin UI, there are a couple of places with description inputs, such as inventory/collection cat…
-
High 8.2
league/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrase
league/oauth2-server is an implementation of an OAuth 2.0 authorization server written in PHP. Starting in version 8.3.2 and prior to version 8.5.3, servers that passed their keys to the CryptKey constructor as as string instead of a file path will have had t…
-
High 7.1
Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content
Sanitize is an allowlist-based HTML and CSS sanitizer. Using carefully crafted input, an attacker may be able to sneak arbitrary HTML and CSS through Sanitize starting with version 3.0.0 and prior to version 6.0.2 when Sanitize is configured to use the built-…
-
Medium 6.3
SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code.
SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerability where those users could use the `library_path` config value to allow arbitrary python code to …
-
High 7.2
An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.…
-
Medium 6.5
A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. …
-
High 7.5
An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially craft…
-
Critical 9.8
A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially craf…
-
High 7.2
An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5…
-
High 7.2
An os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.…
-
High 7.3
An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0…
-
High 7.5
A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-cr…
-
High 7.3
A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A speci…
-
Medium 4.7
Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN…
-
Medium 4.7
Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN…
-
High 8.1
An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.…
-
High 8.8
Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR3…
-
High 8.8
Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR3…
-
Medium 4.2
A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-cra…