Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
110 results · page 2 of 3
Jul 15, 2025Vulnerability in Oracle Application Express (component: Strategic Planner Starter App).CVE-2025-50067 · Other software · Oracle Corporation · reported by secalert_us@oracle.comCritical 9
Vulnerability in Oracle Application Express (component: Strategic Planner Starter App). Supported versions that are affected are 24.2.4 and 24.2.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Express. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Application Express. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).
- Product
- Oracle Application Express
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 21, 2025Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v.1.6.2.20 allows a remote attacker to execute arbitrary code.CVE-2024-57529 · Other software · Jeppesen · reported by MITREMedium 6.1
Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v.1.6.2.20 allows a remote attacker to execute arbitrary code.
- Product
- Jetplanner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 9, 2025WP Map Route Planner: Cross-Site Request Forgery (CSRF)CVE-2025-32621 · WordPress plugins & themes · reported by PatchstackHigh 7.1
Cross-Site Request Forgery (CSRF) vulnerability in Vsourz Digital WP Map Route Planner wp-map-route-planner allows Cross Site Request Forgery.This issue affects WP Map Route Planner: from n/a through <= 1.0.0.
- Product
- WP Map Route Planner
- Affected
- up to 1.0.0
- What to do
- Affects up to 1.0.0. Update WP Map Route Planner to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Mar 3, 2025Events Planner: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2025-26586 · WordPress plugins & themes · reported by PatchstackHigh 7.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in abelony Events Planner events-planner allows Reflected XSS.This issue affects Events Planner: from n/a through <= 1.3.10.
- Product
- Events Planner
- Affected
- up to 1.3.10
- What to do
- Affects up to 1.3.10. Update Events Planner to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Jan 22, 2025Content Planner: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2025-23631 · WordPress plugins & themes · reported by PatchstackHigh 7.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sarah Lewis Content Planner content-planner allows Reflected XSS.This issue affects Content Planner: from n/a through <= 1.0.
- Product
- Content Planner
- Affected
- up to 1.0
- What to do
- Affects up to 1.0. Update Content Planner to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Dec 6, 2024Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_smac_planner().CVE-2024-44856 · Other software · Openrobotics · reported by MITREHigh 7.5
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_smac_planner().
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_navfn_planner().CVE-2024-44855 · Other software · Openrobotics · reported by MITREHigh 7.5
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_navfn_planner().
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 20, 2024Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a crafted web request.CVE-2024-48536 · Other software · esoft · reported by MITREHigh 7.5
Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a crafted web request.
- Product
- planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 20, 2024A stored cross-site scripting (XSS) vulnerability in eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary web scripts or HTML via injecting a crafCVE-2024-48535 · Other software · Esoftplanner · reported by MITREMedium 5.4
A stored cross-site scripting (XSS) vulnerability in eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.
- Product
- Esoft Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 20, 2024A reflected cross-site scripting (XSS) vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in thCVE-2024-48534 · Other software · Esoftplanner · reported by MITREMedium 5.4
A reflected cross-site scripting (XSS) vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
- Product
- Esoft Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 20, 2024A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSoft Planner 3.24.08271-USA allows attackers to enumeCVE-2024-48533 · Other software · esoft · reported by MITREMedium 5.3
A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSoft Planner 3.24.08271-USA allows attackers to enumerate valid user e-mail accounts.
- Product
- planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 20, 2024A reflected cross-site scripting (XSS) vulnerability on the Rental Availability module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary codCVE-2024-48531 · Other software · Esoftplanner · reported by MITREMedium 5.4
A reflected cross-site scripting (XSS) vulnerability on the Rental Availability module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
- Product
- Esoft Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 20, 2024An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service (DoS) via a crafted POSCVE-2024-48530 · Other software · esoft · reported by MITREHigh 7.5
An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
- Product
- planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 1, 2024Progress Planner: Missing AuthorizationCVE-2024-37411 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through <= 0.9.1.
- Product
- Progress Planner
- Affected
- up to 0.9.1
- What to do
- Affects up to 0.9.1. Update Progress Planner to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Jul 22, 2024Progress Planner: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-37422 · WordPress plugins & themes · reported by PatchstackMedium 5.9
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through <= 0.9.2.
- Product
- Progress Planner
- Affected
- up to 0.9.2
- What to do
- Affects up to 0.9.2. Update Progress Planner to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Apr 19, 2024Mealie is a self hosted recipe manager and meal planner.CVE-2024-31994 · Other software · mealie-recipes · reported by GitHubMedium 6.5
Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, an attacker can point the image request to an arbitrarily large file. Mealie will attempt to retrieve this file in whole. If it can be retrieved, it may be stored on the file system in whole (leading to possible disk consumption), however the more likely scenario given resource limitations is that the container will OOM during file retrieval if the target file size is greater than the allocated memory of the container. At best this can be used to force the container to infinitely restart due to OOM (if so configured in `docker-compose.yml), or at worst this can be used to force the Mealie container to crash and remain offline. In the event that the file can be retrieved, the lack of rate limiting on this endpoint also permits an attacker to generate ongoing requests to any target of their choice, potentially contributing to an external-facing DoS attack. This vulnerability is fixed in 1.4.0.
- Product
- mealie
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 19, 2024Mealie is a self hosted recipe manager and meal planner.CVE-2024-31993 · Other software · mealie-recipes · reported by GitHubMedium 6.2
Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the scrape_image function will retrieve an image based on a user-provided URL, however the provided URL is not validated to point to an external location and does not have any enforced rate limiting. The response from the Mealie server will also vary depending on whether or not the target file is an image, is not an image, or does not exist. Additionally, when a file is retrieved the file may remain stored on Mealie’s file system as original.jpg under the UUID of the recipe it was requested for. If the attacker has access to an admin account (e.g. the default changeme@example.com), this file can then be retrieved. Note that if Mealie is running in a development setting this could be leveraged by an attacker to retrieve any file that the Mealie server had downloaded in this fashion without the need for administrator access. This vulnerability is fixed in 1.4.0.
- Product
- mealie
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 19, 2024Mealie is a self hosted recipe manager and meal planner.CVE-2024-31992 · Other software · mealie-recipes · reported by GitHubMedium 6.5
Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the safe_scrape_html function utilizes a user-controlled URL to issue a request to a remote server, however these requests are not rate-limited. While there are efforts to prevent DDoS by implementing a timeout on requests, it is possible for an attacker to issue a large number of requests to the server which will be handled in batches based on the configuration of the Mealie server. The chunking of responses is helpful for mitigating memory exhaustion on the Mealie server, however a single request to an arbitrarily large external file (e.g. a Debian ISO) is often sufficient to completely saturate a CPU core assigned to the Mealie container. Without rate limiting in place, it is possible to not only sustain traffic against an external target indefinitely, but also to exhaust the CPU resources assigned to the Mealie container. This vulnerability is fixed in 1.4.0.
- Product
- mealie
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 19, 2024Mealie is a self hosted recipe manager and meal planner.CVE-2024-31991 · Other software · mealie-recipes · reported by GitHubMedium 4.1
Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the safe_scrape_html function utilizes a user-controlled URL to issue a request to a remote server. Based on the content of the response, it will either parse the content or disregard it. This function, nor those that call it, add any restrictions on the URL that can be provided, nor is it restricted to being an FQDN (i.e., an IP address can be provided). As this function’s return will be handled differently by its caller depending on the response, it is possible for an attacker to use this functionality to positively identify HTTP(s) servers on the local network with any IP/port combination. This issue can result in any authenticated user being able to map HTTP servers on a local network that the Mealie service has access to. Note that by default any user can create an account on a Mealie server, and that the default changeme@example.com user is available with its hard-coded password. This vulnerability is fixed in 1.4.0.
- Product
- mealie
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 14, 2023GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess.php file upload with resultant XSS.CVE-2023-45881 · Other software · Gibbonedu · reported by MITREMedium 6.1
GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess.php file upload with resultant XSS. The imageAsLinks parameter must be set to Y to return HTML code. The filename attribute of the bodyfile1 parameter is reflected in the response.
- Product
- Gibbon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordherolab.usd.deherolab.usd.de
Oct 14, 2022Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/users_add.php.CVE-2022-41539 · Other software · Wedding Planner Project · reported by MITREHigh 8.8
Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/users_add.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
- Product
- Wedding Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2022Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /Wedding-Management-PHP/admin/photos_add.php.CVE-2022-41538 · Other software · Wedding Planner Project · reported by MITREHigh 8.8
Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /Wedding-Management-PHP/admin/photos_add.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
- Product
- Wedding Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.CVE-2022-42229 · Other software · Wedding Planner Project · reported by MITREHigh 8.8
Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.
- Product
- Wedding Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.CVE-2022-42034 · Other software · Wedding Planner Project · reported by MITREHigh 8.8
Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.
- Product
- Wedding Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2022Wedding Planner v1.0 is vulnerable to arbitrary code execution.CVE-2022-42075 · Other software · Wedding Planner Project · reported by MITRECritical 9.8
Wedding Planner v1.0 is vulnerable to arbitrary code execution.
- Product
- Wedding Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2022Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php.CVE-2022-40485 · Other software · Wedding Planner Project · reported by MITRECritical 9.8
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php.
- Product
- Wedding Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2022Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php.CVE-2022-40484 · Other software · Wedding Planner Project · reported by MITRECritical 9.8
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php.
- Product
- Wedding Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2022Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.php.CVE-2022-40483 · Other software · Wedding Planner Project · reported by MITRECritical 9.8
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.php.
- Product
- Wedding Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2022Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php.CVE-2022-40404 · Other software · Wedding Planner Project · reported by MITREHigh 8.8
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php.
- Product
- Wedding Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2022Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/feature_edit.php.CVE-2022-40403 · Other software · Wedding Planner Project · reported by MITREHigh 7.2
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/feature_edit.php.
- Product
- Wedding Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2022Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_assign.php.CVE-2022-40402 · Other software · Wedding Planner Project · reported by MITREHigh 8.8
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_assign.php.
- Product
- Wedding Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking_id parameter at /admin/budget.php.CVE-2022-38509 · Other software · Wedding Planner Project · reported by MITRECritical 9.8
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking_id parameter at /admin/budget.php.
- Product
- Wedding Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 25, 2022Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in Simple Event Planner WordPress plugin <= 1.5.4 allows user with author or higherCVE-2022-25612 · WordPress plugins & themes · reported by PatchstackMedium 4.1
Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in Simple Event Planner WordPress plugin <= 1.5.4 allows user with author or higher user rights inject the malicious code via vulnerable parameters: &custom[event_organiser], &custom[organiser_email], &custom[organiser_contact].
- Affected
- up to 1.5.4
- What to do
- Affects up to 1.5.4. Update the plugin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.comwordpress.org
Mar 25, 2022Authenticated Stored Cross-Site Scripting (XSS) in Simple Event Planner plugin <= 1.5.4 allows attackers with contributor or higher user roles to inject the malCVE-2022-25611 · WordPress plugins & themes · reported by PatchstackMedium 4.1
Authenticated Stored Cross-Site Scripting (XSS) in Simple Event Planner plugin <= 1.5.4 allows attackers with contributor or higher user roles to inject the malicious script by using vulnerable parameter &custom[add_seg][].
- Affected
- up to 1.5.4
- What to do
- Affects up to 1.5.4. Update the plugin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.comwordpress.org
Mar 3, 2021VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability.CVE-2021-21978 · Other software · VMware · reported by security@vmware.comCritical 9.8
VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could upload and execute a specially crafted file leading to remote code execution within the logupload container.
- Product
- View Planner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comvmware.com
Nov 23, 2020A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner.CVE-2018-20802 · Other software · MongoDB Inc. · reported by cna@mongodb.comMedium 6.5
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3.
- Product
- MongoDB Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjira.mongodb.orgjira.mongodb.org
Apr 6, 2020An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11587 · Other software · Cipplanner · reported by MITREHigh 7.5
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and get the content of ETL Processes running on the server.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11586 · Other software · Cipplanner · reported by MITRECritical 9.8
An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020An issue was discovered in CIPPlanner CIPAce 6.80 Build 2016031401.CVE-2020-11599 · Other software · Cipplanner · reported by MITREHigh 7.5
An issue was discovered in CIPPlanner CIPAce 6.80 Build 2016031401. GetDistributedPOP3 allows attackers to obtain the username and password of the SMTP user.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11598 · Other software · Cipplanner · reported by MITRECritical 9.8
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. Upload.ashx allows remote attackers to execute arbitrary code by uploading and executing an ASHX file.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11597 · Other software · Cipplanner · reported by MITRECritical 9.8
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST request and inject SQL statements in the user context of the db owner.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11596 · Other software · Cipplanner · reported by MITREHigh 7.5
A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP GET requests to a certain URL and obtain information about what files and directories reside on the server.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11595 · Other software · Cipplanner · reported by MITREHigh 7.5
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain the upload folder path that includes the hostname in a UNC path.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11594 · Other software · Cipplanner · reported by MITREHigh 7.5
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that causes a stack error to be shown providing the full file path.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11593 · Other software · Cipplanner · reported by MITREHigh 7.5
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST request with injected HTML data that is later leveraged to send emails from a customer trusted email address.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11592 · Other software · Cipplanner · reported by MITREHigh 7.5
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and get the columns of a specific table within the CIP database.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11591 · Other software · Cipplanner · reported by MITREMedium 5.3
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain the full application path along with the customer name.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11590 · Other software · Cipplanner · reported by MITREMedium 5.3
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET request to HealthPage.aspx and obtain the internal server name.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11589 · Other software · Cipplanner · reported by MITREHigh 7.5
An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make a GET request to a certain URL and obtain information that should be provided to authenticated users only.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Apr 6, 2020An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.CVE-2020-11588 · Other software · Cipplanner · reported by MITREMedium 5.3
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET request to two files that contain customer data and application paths.
- Product
- Cipace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcriticalstart.comcriticalstart.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.