‼ CVE-2022-3361 ‼
📖 Read
via "National Vulnerability Database".
The Ultimate Member plugin for WordPress is vulnerable to directory traversal in versions up to, and including 2.5.0 due to insufficient input validation on the 'template' attribute used in shortcodes. This makes it possible for attackers with administrative privileges to supply arbitrary paths using traversal (../../) to access and include files outside of the intended directory. If an attacker can successfully upload a php file then remote code execution via inclusion may also be possible. Note: for users with less than administrative capabilities, /wp-admin access needs to be enabled for that user in order for this to be exploitable by those users.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36960 ‼
📖 Read
via "National Vulnerability Database".
SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to escalate user privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3383 ‼
📖 Read
via "National Vulnerability Database".
The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 via the get_option_value_from_callback function that accepts user supplied input and passes it through call_user_func(). This makes it possible for authenticated attackers, with administrative capabilities, to execute code on the server.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3747 ‼
📖 Read
via "National Vulnerability Database".
The Becustom plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.5.2. This is due to missing nonce validation when saving the plugin's settings. This makes it possible for unauthenticated attackers to update the plugin's settings like betheme_url_slug, replaced_theme_author, and betheme_label to name a few, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3896 ‼
📖 Read
via "National Vulnerability Database".
The WP Affiliate Platform plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_SERVER["REQUEST_URI"] in versions up to, and including, 6.3.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This is unlikely to work in modern browsers.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36964 ‼
📖 Read
via "National Vulnerability Database".
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3897 ‼
📖 Read
via "National Vulnerability Database".
The WP Affiliate Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 6.3.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3751 ‼
📖 Read
via "National Vulnerability Database".
SQL Injection in GitHub repository owncast/owncast prior to 0.0.13.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3991 ‼
📖 Read
via "National Vulnerability Database".
The Photospace Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters saved via the update() function in versions up to, and including, 2.3.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-4030 ‼
📖 Read
via "National Vulnerability Database".
The Simple:Press plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 6.8 via the 'file' parameter which can be manipulated during user avatar deletion. This makes it possible with attackers, with minimal permissions such as a subscriber, to supply paths to arbitrary files on the server that will subsequently be deleted. This can be used to delete the wp-config.php file that can allow an attacker to configure the site and achieve remote code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3384 ‼
📖 Read
via "National Vulnerability Database".
The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 via the populate_dropdown_options function that accepts user supplied input and passes it through call_user_func(). This is restricted to non-parameter PHP functions like phpinfo(); since user supplied parameters are not passed through the function. This makes it possible for authenticated attackers, with administrative privileges, to execute code on the server.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-4029 ‼
📖 Read
via "National Vulnerability Database".
The Simple:Press plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sforum_[md5 hash of the WordPress URL]' cookie value in versions up to, and including, 6.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This would be highly complex to exploit as it would require the attacker to set the cookie a cookie for the targeted user.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2021-31693 ‼
📖 Read
via "National Vulnerability Database".
VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest OS, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a denial-of-service condition in the Windows guest OS.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3995 ‼
📖 Read
via "National Vulnerability Database".
The TeraWallet plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 1.4.3. This is due to insufficient validation of the user-controlled key on the lock_unlock_terawallet AJAX action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to lock/unlock other users wallets.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2022-41413 ‼
📖 Read
via "National Vulnerability Database".
perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted input into the Search function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45337 ‼
📖 Read
via "National Vulnerability Database".
Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41412 ‼
📖 Read
via "National Vulnerability Database".
An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45328 ‼
📖 Read
via "National Vulnerability Database".
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44096 ‼
📖 Read
via "National Vulnerability Database".
Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45332 ‼
📖 Read
via "National Vulnerability Database".
LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44097 ‼
📖 Read
via "National Vulnerability Database".
Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.📖 Read
via "National Vulnerability Database".