Archive
September 2023
Vulnerabilities first published in this month (UTC), newest first.
2,174 results · Feed
-
Unscored —
Open Redirection Vulnerability in Symantec Identity Portal 14.4
An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4
-
High 8.6
Improper Authorization in Ormazabal products
Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive information for the organisation, without being authenticated within the web server.
-
High 7.5
DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending spec…
-
High 8.1
SQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, may allow an unauthenticated attacker to execute arbitrary SQL statements on the DBM…
-
High 8.8
Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0
A SQL Injection vulnerability has been found in Nozomi Networks Guardian and CMC, due to improper input validation in certain parameters used in the Query functionality. Authenticated users may be able to execute arbitrary SQL statements on the DBMS used by t…
-
High 7.8
A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execut…
-
Critical 9.1
Unauthorized Access Control Vulnerability in Uniview IP Camera
The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Succe…
-
High 7.5
RKE2 supervisor port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack
A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s servers apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects RKE2: from 1.24.0 before 1.24.17+rke2r1, from v1.25.…
-
High 8.2
Incorrect Authorization in GitLab
An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. …
-
Medium 5.8
Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending
The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versions up to, and including, 6.9.3. This is due to insufficient restrictions on the sendMail.php file that allows direct access. This makes it…
-
Medium 6.5
blamer vulnerable to Arbitrary Argument Injection via the blameByFile() API
Versions of the package blamer before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile() API. The library does not sanitize for user input or validate the given file path conforms to a specific schema, nor does it properly pass command…
-
High 8.4
Cross-site Scripting (XSS) - DOM in librenms/librenms
Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.1.
-
Unscored —CVE-2020-24089 Public exploit
An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a…
-
Unscored —
A reflected cross-site scripting (XSS) vulnerability in the url_str URL parameter of ISL ARP Guard v4.0.2 allows attack…
-
Unscored —
MiniTool Shadow Maker version 4.1 contains an insecure installation process that allows attackers to achieve remote cod…
-
Unscored —
MiniTool Partition Wizard 12.8 contains an insecure update mechanism that allows attackers to achieve remote code execu…
-
Unscored —
MiniTool Movie Maker 7.0 contains an insecure installation process that allows attackers to achieve remote code executi…
-
Unscored —
MiniTool Partition Wizard 12.8 contains an insecure installation mechanism that allows attackers to achieve remote code…
-
Unscored —
MiniTool Power Data Recovery 11.6 contains an insecure installation process that allows attackers to achieve remote cod…
-
Unscored —
MiniTool Power Data Recovery version 11.6 and before contains an insecure in-app payment system that allows attackers t…
-
Unscored —CVE-2023-36319 Public exploit
File Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the actio…
-
Unscored —
Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One account has administrative …
-
Unscored —
A Cross-site scripting (XSS) vulnerability in Nagios XI version 5.11.1 and below allows authenticated attackers with ac…
-
Unscored —CVE-2023-40933 Public exploit
A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner co…
-
Unscored —
A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage ho…
-
Unscored —
A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attacker…
-
Unscored —
An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory trave…
-
Unscored —
A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tok…
-
Medium 6.1
Jodit Editor vulnerable to cross-site scripting
Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component.
-
Critical 9.8
NATS nats-server allows directory traversal via unintended path to a management action
NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account.
-
Critical 10.0
SQLpage vulnerable to public exposure of database credentials
SQLpage is a SQL-only webapp builder. Someone using SQLpage versions prior to 0.11.1, whose SQLpage instance is exposed publicly, with a database connection string specified in the `sqlpage/sqlpage.json` configuration file (not in an environment variable), wi…
-
Medium 6.5
Pow Mnesia cache doesn't invalidate all expired keys on startup
Pow is a authentication and user management solution for Phoenix and Plug-based apps. Starting in version 1.0.14 and prior to version 1.0.34, use of `Pow.Store.Backend.MnesiaCache` is susceptible to session hijacking as expired keys are not being invalidated …
-
High 8.1
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In version 0.3.9 and prior, under certain conditions, the memory used by the builtins `raw_call`, `create_from_blueprint` and `create_copy_of` can be corrupted. For `raw_call`…
-
Medium 5.3
Vyper has incorrect re-entrancy lock when key is empty string
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Starting in version 0.2.9 and prior to version 0.3.10, locks of the type `@nonreentrant("")` or `@nonreentrant('')` do not produce reentrancy checks at runtime. This issue is …
-
Medium 6.5
Socomec MOD3GP-SY-120K Cross-site Scripting
A potential attacker with or without (cookie theft) access to the device would be able to include malicious code (XSS) when uploading new device configuration that could affect the intended function of the device.
-
Medium 6.3
Socomec MOD3GP-SY-120K Cross-site Scripting
Persistent cross-site scripting (XSS) in the web application of MOD3GP-SY-120K allows an authenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into the field MAIL_RCV. When a legitimate user attempts to access to the vuln…
-
High 8.9
Socomec MOD3GP-SY-120K Cross-Site Request Forgery
Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the information from the headers that is necessary to create specially designed URLs and originate malicious actions when a legitimate user is logged …
-
High 7.5
Socomec MOD3GP-SY-120K Plaintext Storage of a Password
The web application that owns the device clearly stores the credentials within the user management section. Obtaining this information can be done remotely due to the incorrect management of the sessions in the web application.
-
High 8.8
Socomec MOD3GP-SY-120K Code Injection
The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section (MAIL SERVER) where the information …
-
Critical 10.0
Socomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking
Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions that the web app allows on the device.