Skip to content
OpenAdvisories

Archive

31 August 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.0

    Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

    Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

  • Critical 9.6

    Improper SAML signature verification

    An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r.

  • Critical 9.8

    Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass

    The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. Thi…