Archive
6 November 2023
Vulnerabilities first published on this day (UTC), newest first.
57 results · Clear filters · Feed
-
Medium 5.5
WordPress WP Reroute Email Plugin <= 1.4.6 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sajjad Hossain WP Reroute Email allows SQL Injection.This issue affects WP Reroute Email: from n/a through 1.4.6.
-
Medium 6.7
WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kemal YAZICI - PluginPress Shortcode IMDB allows SQL Injection.This issue affects Shortcode IMDB: from n/a through 6.0.8.
-
Medium 6.7
WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar The School Management – Education & Learning Management allows SQL Injection.This issue affects The School Management – Education & Learning Managem…
-
Medium 6.4
WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.This issue affects Accessibility Suite by Online ADA: from n/a through 4.12.
-
Medium 6.7
WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through …
-
Medium 4.3
PAC Files Exposed to Internet Websites
Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.
-
Medium 6.5
Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc
A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This vulnerability stems from an RPC function that can be blocked indefinitely. The issue arises because the "rpcecho" ser…
-
Medium 5.3
Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web s…
-
Medium 6.7
In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalat…
-
Medium 6.7
In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalat…
-
Medium 6.7
In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of …
-
Medium 6.7
In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of priv…
-
Medium 6.7
In secmem, there is a possible memory corruption due to type confusion. This could lead to local escalation of privileg…
-
Medium 6.7
In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privileg…
-
Medium 5.5
e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configura…
-
Medium 5.5
Vaerys-Dawn DiscordSailv2 Tag access control
A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component Tag Handler. The manipulation leads to improper access controls. Upgrading to version 2.1…
-
Medium 5.9
Weak ciphers vulnerability in Softing smartLink SW-HT
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication (SSL).