Skip to content
OpenAdvisories

Archive

12 August 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Feed

  • Medium 6.4

    Buffer overflow in Zephyr USB

    Potential buffer overflow vulnerabilities in the following locations: https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359 https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_…

  • High 8.8

    Premium Packages - Sell Digital Products Securely <= 5.7.4 - Arbitrary User Meta Update to Authenticated (Subscriber+) Privilege Escalation

    The Premium Packages - Sell Digital Products Securely plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.4 due to insufficient restriction on the 'wpdmpp_update_profile' function. This makes it possible for authen…

  • Critical 9.8
    CVE-2023-3452 Public exploit Scanner template

    Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

    The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allow…