Archive
7 August 2023
Vulnerabilities first published on this day (UTC), newest first.
33 results · Clear filters · Feed
-
Medium 6.8
ScanCode.io command injection in docker image fetch process
ScanCode.io is a server to script and automate software composition analysis with ScanPipe pipelines. Prior to version 32.5.1, the software has a possible command injection vulnerability in the docker fetch process as it allows to append malicious commands in…
-
Medium 6.5
PrestaShop vulnerable to file deletion via CustomerMessage
PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete files from the server via the CustomerMessage API. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
-
Medium 6.7
PrestaShop vulnerable to file deletion via attachment API
PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete a file from the server by using the Attachments controller and the Attachments API. Version 8.1.1 contains a patch for this issue. There are no known wor…
-
Medium 6.8
PrestaShop vulnerable to file reading through path traversal
PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, the `displayAjaxEmailHTML` method can be used to read any file on the server, potentially even outside of the project if the server is not correctly configured. Version 8.1.1 con…
-
Medium 6.5
PrestaShop vulnerable to path traversal
PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, in the back office, files can be compromised using path traversal by replaying the import file deletion query with a specified file path that uses the traversal path. Version 8.1…
-
Medium 6.7
PrestaShop vulnerable to boolean SQL injection in search product in BO
PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, SQL injection possible in the product search field, in BO's product page. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
-
Medium 5.5
Cryptomator vulnerable to Local Elevation of Privileges
Cryptomator encrypts data being stored on cloud infrastructure. The MSI installer provided on the homepage for Cryptomator version 1.9.2 allows local privilege escalation for low privileged users, via the `repair` function. The problem occurs as the repair fu…
-
Medium 6.3
SourceCodester Inventory Management System ex_catagory_data.php sql injection
A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file ex_catagory_data.php. The manipulation of the argument columns[1][data] leads to sql injection. The …
-
Medium 6.3
SourceCodester Inventory Management System product_data.php. sql injection
A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file product_data.php.. The manipulation of the argument columns[1][data] leads to sql injection. The a…
-
Medium 6.3
SourceCodester Inventory Management System catagory_data.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file catagory_data.php. The manipulation of the argument columns[1][data] leads to sql injection. It is possibl…
-
Medium 6.5
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
-
Medium 5.4
WP Food Manager < 1.0.4 - Admin+ Stored XSS
The WP Food Manager WordPress plugin before 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (fo…
-
Medium 6.1
WPCode < 2.0.13.1 - Reflected XSS
The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting
-
Medium 6.1
MultiParcels Shipping For WooCommerce < 1.15.4 - Reflected XSS
The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape various parameters before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such a…
-
Medium 5.4
Quiz And Survey Master < 8.1.11 - Contributor+ Stored XSS
The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks
-
Medium 5.5
Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid
A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is t…
-
Medium 4.4
In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local info…
-
Medium 6.7
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esc…
-
Medium 6.7
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esc…
-
Medium 6.7
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esc…
-
Medium 6.7
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esc…
-
Medium 4.4
In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local info…
-
Medium 4.4
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local info…
-
Medium 6.7
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Medium 6.7
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o…
-
Medium 6.7
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o…
-
Medium 6.7
In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation …
-
Medium 6.7
In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local e…
-
Medium 6.7
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.3
SourceCodester Resort Reservation System view_fee.php sql injection
A vulnerability has been found in SourceCodester Resort Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file view_fee.php. The manipulation of the argument id leads to sql injection. The attack can be initiate…
-
Medium 5.9
An issue was discovered in Fujitsu Software Infrastructure Manager (ISM) before 2.8.0.061. The ismsnap component (in th…
-
Medium 5.5
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attac…
-
Medium 6.5
Gitea erroneous repo clones
In Gitea through 1.17.1, repo cloning can occur in the migration function.