Download Monitor < 4.4.5 - SQL Injection

The Download Monitor plugin for WordPress is vulnerable to SQL injection via the 'orderby' parameter in versions before 4.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attacker...

Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 contains a remote code execution caused by unauthenticated access via T3, IIOP, letting attackers take over the server, exploit requires network access. id: CVE-2021-2135 info: name: Oracle WebLogic Server - Remote Code Execution author:...

Images to WebP < 1.9 - Authenticated Local File Inclusion

The Images to WebP WordPress plugin before version 1.9 did not validate or sanitize the tab parameter before using it in the include function. id: CVE-2021-24644 info: name: Images to WebP 1.9 - Authenticated Local File Inclusion author: Sourabh-Sahu severity: high description: | The Images to We...

Kramer VIAware - Privilege Escalation and Remote Code Execution

Kramer VIAware, all tested versions, allow privilege escalation and remote code execution due to misconfigured sudo permissions. Attackers can execute arbitrary system commands remotely if the web interface is accessible, due to vulnerabilities in the handling of privileged operations through...

ROOT-APP-NPM-CVE-2021-23382 CVE-2021-23382 in postcss - Patched by Root

Root has patched CVE-2021-23382 in the postcss package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-40633 CVE-2021-40633 in giflib - Patched by Root

Root has patched CVE-2021-40633 in the giflib package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-31879 CVE-2021-31879 in wget - Patched by Root

Root has patched CVE-2021-31879 in the wget package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-4217 CVE-2021-4217 in unzip - Patched by Root

Root has patched CVE-2021-4217 in the unzip package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2021-26934 CVE-2021-26934 in linux - Patched by Root

Root has patched CVE-2021-26934 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2021-3714 CVE-2021-3714 in linux - Patched by Root

Root has patched CVE-2021-3714 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2021-3864 CVE-2021-3864 in linux - Patched by Root

Root has patched CVE-2021-3864 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2021-3847 CVE-2021-3847 in linux - Patched by Root

Root has patched CVE-2021-3847 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-26934 CVE-2021-26934 in linux - Patched by Root

Root has patched CVE-2021-26934 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-35331 CVE-2021-35331 in tcl8.6 - Patched by Root

Root has patched CVE-2021-35331 in the tcl8.6 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-45261 CVE-2021-45261 in patch - Patched by Root

Root has patched CVE-2021-45261 in the patch package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-46242 CVE-2021-46242 in hdf5 - Patched by Root

Root has patched CVE-2021-46242 in the hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-37501 CVE-2021-37501 in hdf5 - Patched by Root

Root has patched CVE-2021-37501 in the hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-46310 CVE-2021-46310 in djvulibre - Patched by Root

Root has patched CVE-2021-46310 in the djvulibre package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-46312 CVE-2021-46312 in djvulibre - Patched by Root

Root has patched CVE-2021-46312 in the djvulibre package for Root:Debian:12. Multiple fixed versions available...

Zoho ManageEngine ServiceDesk Plus - Authentication Bypass

Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication. id: CVE-2021-37415 info: name: Zoho ManageEngine ServiceDesk Plus - Authentication Bypass author: daffainfo,jjcho severity: critical description: | Zoho...