Archive
November 2024
Vulnerabilities first published in this month (UTC), newest first.
4,074 results · Feed
-
High 7.2
A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered af…
-
High 7.2
A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered af…
-
High 7.2
A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactu…
-
Critical 9.8
ProjectSend Unauthenticated Configuration Modification
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw by sending crafted HTTP requests to options.php, enabling unauthorized modification of the application's conf…
KEV Dec 3, 2024 -
Medium 6.1
Parsi Date <= 5.1.1 - Reflected Cross-Site Scripting via add_query_arg Parameter
The Parsi Date plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.1.1. This makes it possible for unauthenticated attackers to in…
-
High 7.8
Improper Authentication in TrustZone
An image with a version lower than the fuse version may potentially be booted lead to improper authentication.
-
High 7.5
Configurations in Android Build
Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.
-
Medium 6.8
Use After Free in WLAN
A race condition exists in a driver potentially leading to a use-after-free condition.
-
High 8.8
Multiple buffer overread vulnerabilities in WLAN
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
-
High 7.8
Buffer overwrite due to improper input validation in WLAN host
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW
-
High 8.8
Use of Out-of-range Pointer Offset in Video
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
-
Critical 9.8
Improper Authentication in Core
Initial xbl_sec revision does not have all the debug policy features and critical checks.
-
Medium 6.4
Support SVG – Upload svg files in wordpress without hassle <= 1.1.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG File Upload
The Support SVG – Upload svg files in wordpress without hassle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escapi…
-
Medium 6.4
Spotify Play Button for WordPress <= 2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via spotifyplaybutton Shortcode
The Spotify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's spotifyplaybutton shortcode in all versions up to, and including, 2.11 due to insufficient input sanitization and output escaping on user …
-
Medium 6.4
BNE Gallery Extended <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gallery Shortcode
The BNE Gallery Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gallery' shortcode in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user supplied attributes.…
-
Medium 5.5
Booster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode
The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wcj_product_meta shortcode in all versions up to, and including, 7.2.3 due to insufficient input sanitization and output escaping on user supplied a…
-
High 7.5
Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction p…
-
High 7.5
The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. Mor…
-
High 7.4
Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunctio…
-
Critical 9.1
API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, mode…
-
Critical 9.1
There are several hidden accounts. Some of them are intended for maintenance engineers, and with the knowledge of their…
-
Medium 5.3
The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But c…
-
Medium 5.3
Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administra…
-
Critical 9.1
"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides lo…
-
High 7.5CVE-2024-33605 Scanner template
Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path t…
-
Medium 5.9
User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved…
-
Medium 5.9
User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved…
-
Medium 5.9
User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved…
-
Medium 5.9
Affected devices create coredump files when crashed, storing them with world-readable permission. Any local user of the…
-
Critical 9.0
The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. More…
-
Medium 6.1
Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode
Multiple plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the cminds_free_guide shortcode in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …
-
High 7.2
Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.2.15 due to insufficient input sanitization and output escaping. This makes it poss…
-
Low 3.8
Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a suffici…
-
Medium 4.3
51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API managedoverlayimages.cgi was vulnerable…
-
High 7.5
Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lea…
-
Medium 4.4
Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is possible to edit and/or remove vi…
-
Medium 6.3
Seth Fogie, member of the AXIS Camera Station Pro Bug Bounty Program, has found that the Incident report feature may ex…
-
Medium 4.2
Gee-netics, member of the AXIS Camera Station Pro Bug Bounty Program has found that it is possible for a non-admin user…
-
Medium 6.5
Product Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Read
The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9 via the handle_downloads() function due to insufficient file path validation/sanitization. This makes it possible for …
-
Medium 6.3
InPost Gallery <= 2.1.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template
The The InPost Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution via the inpost_gallery_get_shortcode_template AJAX action in all versions up to, and including, 2.1.4.2. This is due to the software allowing users to execute an action…