Archive
27 October 2023
Vulnerabilities first published on this day (UTC), newest first.
97 results · Feed
-
High 7.5
DoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-24998
### Impact ESAPI 2.5.2.0 and later addressed the DoS vulnerability described in CVE-2023-24998, which Apache Commons FileUpload 1.5 attempted to remediate. But while writing up a new security bulletin regarding the impact on the affected ESAPI `HTTPUtilities.…
-
Low 3.8
Vagrant’s Windows Installer Allowed Directory Junction Write
HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.
-
High 8.8
Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the databa…
-
High 7.1
WordPress Grid Plus Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in G5Theme Grid Plus – Unlimited grid plugin <= 1.3.2 versions.
-
High 7.3
ColumbiaSoft Document Locator WebTools login improper authentication
A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authentication/login of the component WebTools. The manipulation of the argument Server leads to improper authentication. It …
-
High 7.1
WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin <= 1.4.6 versions.
-
Unscored —
In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could le…
-
Unscored —
In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could le…
-
High 7.8
In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code d…
-
Unscored —
In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused dep…
-
Unscored —CVE-2023-40133 Public exploit
In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused dep…
-
High 7.0
In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local e…
-
Unscored —
In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deput…
-
Unscored —
In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This co…
-
Unscored —
In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This…
-
Medium 6.5
WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin <= 3.19.14 versions.
-
High 7.8
In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. T…
-
Unscored —
In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This coul…
-
Unscored —CVE-2023-40127 Public exploit
In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local…
-
Unscored —
In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could …
-
High 7.8CVE-2023-40130 Public exploit
In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. T…
-
High 7.8
In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. Thi…
-
High 7.8
In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions d…
-
High 7.8
In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input…
-
Unscored —
In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This …
-
Unscored —
In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confuse…
-
Medium 5.9
WordPress Eonet Manual User Approve Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alkaweb Eonet Manual User Approve plugin <= 2.1.3 versions.
-
Medium 5.9
WordPress Smart App Banner Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Stephen Darlington, Wandle Software Limited Smart App Banner plugin <= 1.1.3 versions.
-
Medium 6.3
code-projects Admission Management System student_avatar.php unrestricted upload
A vulnerability was found in code-projects Admission Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file student_avatar.php. The manipulation leads to unrestricted upload. The attack may be la…
-
Medium 6.1
A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that c…
-
High 7.8
A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlie…
-
Medium 6.1
A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0…
-
High 7.3
Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System login.aspx sql injection
A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file l…
-
Medium 6.1
basercms XSS Vulnerability via Favorites Feature
baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0.
-
Medium 6.5
A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range …
-
High 7.6
An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications t…
-
High 7.8
Rockwell Automation Arena® Simulation Uninitialized Pointer Vulnerability
Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized code to the software by using an uninitialized pointer in the application. The threat-actor could the…
-
Medium 6.5
A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malfor…
-
High 7.8
Rockwell Automation Arena® Simulation Out of Bounds Read Vulnerability
An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow. The threat-actor could th…
-
Medium 4.3
Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers wit…