‼ CVE-2022-4700 ‼
📖 Read
via "National Vulnerability Database".
The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the 'royal-elementor-kit' theme. If no such theme is installed doing so can also impact site availability as the site attempts to load a nonexistent theme.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-4704 ‼
📖 Read
via "National Vulnerability Database".
The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_templates_kit' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to import preset site configuration templates including images and settings.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21793 ‼
📖 Read
via "National Vulnerability Database".
3D Builder Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2023-21780, CVE-2023-21781, CVE-2023-21782, CVE-2023-21783, CVE-2023-21784, CVE-2023-21785, CVE-2023-21786, CVE-2023-21787, CVE-2023-21788, CVE-2023-21789, CVE-2023-21790, CVE-2023-21791, CVE-2023-21792.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-21764 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Exchange Server Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21763.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21746 ‼
📖 Read
via "National Vulnerability Database".
Windows NTLM Elevation of Privilege Vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45166 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of user-controlled parameters that are used to act on the data returned to the user. It allows a basic user to access data unrelated to their role.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36442 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38490 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Some parameters allow SQL injection.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21677 ‼
📖 Read
via "National Vulnerability Database".
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability. This CVE ID is unique from CVE-2023-21683, CVE-2023-21758.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38481 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP2. The application is prone to reflected Cross-site Scripting (XSS) in several features.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21550 ‼
📖 Read
via "National Vulnerability Database".
Windows Cryptographic Information Disclosure Vulnerability. This CVE ID is unique from CVE-2023-21540, CVE-2023-21559.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21750 ‼
📖 Read
via "National Vulnerability Database".
Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21675, CVE-2023-21747, CVE-2023-21748, CVE-2023-21749, CVE-2023-21754, CVE-2023-21755, CVE-2023-21772, CVE-2023-21773, CVE-2023-21774.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21757 ‼
📖 Read
via "National Vulnerability Database".
Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21527 ‼
📖 Read
via "National Vulnerability Database".
Windows iSCSI Service Denial of Service Vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38491 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Part of the application does not implement protection against brute-force attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21676 ‼
📖 Read
via "National Vulnerability Database".
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-4338 ‼
📖 Read
via "National Vulnerability Database".
An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-4382 ‼
📖 Read
via "National Vulnerability Database".
A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21749 ‼
📖 Read
via "National Vulnerability Database".
Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21675, CVE-2023-21747, CVE-2023-21748, CVE-2023-21750, CVE-2023-21754, CVE-2023-21755, CVE-2023-21772, CVE-2023-21773, CVE-2023-21774.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-4379 ‼
📖 Read
via "National Vulnerability Database".
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to conduct a remote denial📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21724 ‼
📖 Read
via "National Vulnerability Database".
Microsoft DWM Core Library Elevation of Privilege Vulnerability.📖 Read
via "National Vulnerability Database".