13099 matches found
SQL Injection
forkcms/forkcms is vulnerable to SQL Injection attacks. The ids parameter in getComments function is not properly sanitized, which allows a malicious user to inject and execute arbitrary SQL queries on the target system...
Arbitrary shell execution
Uses of shellexec and exec were not escaping filenames and configuration settings in most cases...
CVE-2021-43090
An XML External Entity XXE vulnerability exists in soa-model before 1.6.4 in the WSDLParser function...
Simple Event Planner < 1.5.5 - Author+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its Event Options, such as eventorganiser, organiseremail and organisercontact which could allow users with a role as low as author to perform Cross-Site Scripting attacks...
Remote Code Execution (RCE)
poetrycore is vulnerable to remote code execution. The vulnerability exists in git.py when the application runs on Windows because the file hashes are not checked before installation which allows an attacker to inject and execute poetry commands...
CVE-2022-25766 Remote Code Execution (RCE)
The package ungit before 1.5.20 are vulnerable to Remote Code Execution RCE via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values remote and ref are passed to the git fetch command. By injecting some git options it was possible to get arbitrary...
DLA-2958-1 usbredir - security update
Bulletin has no description...
Remote Code Execution (RCE)
...
GSD-2022-1000719 btrfs: get rid of warning on transaction commit when using flushoncommit
btrfs: get rid of warning on transaction commit when using flushoncommit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.13 by commit...
The paradigm shift of PCI SSF: what executive leaders need to know now
As a security leader who lives and breathes security controls, protocols, and compliance standards, youre probably aware of the upcoming Payment Card Industry PCI Software Security Framework SSF transition thats been coming for some time. In fact, I posted a blog about the phase-out of the...
Privilege Escalation
...
Denial Of Service (DoS)
...
Out-of-Bounds Read
pjproject is vulnerable to out of bounds read. The vulnerability exists due to the incoming RTCP BYE message contains a reason's length, this declared length is not checked against the actual received packet size, potentially resulting in an out-of-bound read access...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists due to the lack of sanitization of access to the i915 Intel GPU...
Moodle Exposure of Sensitive Information to an Unauthorized Actor
Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...
CVE-2022-24433 Command Injection
The package simple-git before 3.3.0 are vulnerable to Command Injection via argument injection. When calling the .fetchremote, branch, handlerFn function, both the remote and branch parameters are passed to the git fetch subcommand. By injecting some git options it was possible to get arbitrary...
WP HTML Mail < 3.1.3 - Reflected Cross-Site Scripting
The plugin does not escape some URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting PoC https://example.com/wp-admin/options-general.php?page=wp-html-mail=advanced"...
DSA-5094-1 thunderbird - security update
Bulletin has no description...