Archive
11 March 2024
Vulnerabilities first published on this day (UTC), newest first.
34 results · Clear filters · Feed
-
Medium 4.3
Mollie Forms <= 2.6.3 - Missing Authorization
The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportRegistrations function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with subs…
-
Medium 4.3
Mollie Forms <= 2.6.3 - Missing Authorization to Arbitrary Post Duplication
The Mollie Forms plugin for WordPress is vulnerable to unauthorized post or page duplication due to a missing capability check on the duplicateForm function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with …
-
Medium 6.3
Nix Corruption of fixed-output derivations
Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to files in the Nix store to another program running on the host (or another fixed-output derivation) via Unix domain sockets in the abstr…
-
Medium 5.3
SMTP Smuggling in Postal
Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to…
-
Medium 6.5
API key leak in codeium-chrome
codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-chrome extension doesn't check the sender when receiving an external message. This allows an attacker to host a website that will steal the u…
-
Medium 6.5
IKEv2 misconfiguration can cause libreswan to abort and restart
The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a con…
-
Medium 4.6
XML external entity (XXE) injection in OpenOLAT
OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. By manually manipulating http requests when using the draw.io integration it is possible to read arbitrary files as the configured system user and S…
-
Medium 5.5
In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This…
-
Medium 5.5
In plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to loc…
-
Medium 5.1
In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to …
-
Medium 5.9
In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to lo…
-
Medium 5.1
In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a …
-
Medium 4.4
In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could…
-
Medium 6.2
In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local…
-
Medium 5.9
In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check. Th…
-
Medium 6.7
In pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead…
-
Medium 6.4
In pktproc_perftest_gen_rx_packet_sktbuf_mode of link_rx_pktproc.c, there is a possible out of bounds write due to a ra…
-
Medium 6.2
In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This coul…
-
Medium 6.2
In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Medium 5.5
In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead t…
-
Medium 5.3
OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.
-
Medium 5.4
Ultimate Posts Widget < 2.3.1 - Admin+ Stored XSS
The Ultimate Posts Widget WordPress plugin before 2.3.1 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even…
-
Medium 5.4
Photos and Files Contest Gallery < 21.3.1 - Author+ Stored Cross Site Scripting
The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which could allow users with a role as low as author to perform Cross-Site Scripting attacks.
-
Medium 4.9
Login as User or Customer <= 3.8 - Admin Account Takeover
The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site.
-
Medium 6.5
Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover
The User Registration WordPress plugin before 2.12 does not prevent users with at least the contributor role from rendering sensitive shortcodes, allowing them to generate, and leak, valid password reset URLs, which they can use to take over any accounts.
-
Medium 4.3
Paid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field Disclosure
The Paid Memberships Pro WordPress plugin before 2.12.9 does not prevent user with at least the contributor role from leaking other users' sensitive metadata.
-
Medium 6.5
Enhanced Text Widget < 1.6.6 - Admin+ Stored XSS
The Enhanced Text Widget WordPress plugin before 1.6.6 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even …
-
Medium 6.1
Starbox < 3.5.0 - Contributor+ Stored XSS
The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks
-
Medium 5.3
Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure
The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address (which by default is the admin email address) via an unauthenticated crafted request.
-
Medium 6.2
In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission …
-
Medium 5.5
In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in…
-
Medium 5.5CVE-2024-1441 Public exploit
Libvirt: off-by-one error in udevlistinterfacesbystatus()
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an u…
-
Medium 6.1
Amazon AWS aws-js-s3-explorer (aka AWS JavaScript S3 Explorer) 1.0.0 allows XSS via a crafted S3 bucket name to index.h…
-
Medium 6.1
Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbi…