Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
6,841 results · page 91 of 137
Dec 18, 2022A vulnerability was found in luckyshot CRMx and classified as critical.CVE-2022-4592 · Other software · luckyshot · reported by VulDBMedium 6.3
A vulnerability was found in luckyshot CRMx and classified as critical. This issue affects the function get/save/delete/comment/commentdelete of the file index.php. The manipulation leads to sql injection. The attack may be initiated remotely. The name of the patch is 8c62d274986137d6a1d06958a6f75c3553f45f8f. It is recommended to apply a patch to fix this issue. The identifier VDB-216185 was assigned to this vulnerability.
- Product
- CRMx
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 17, 2022A vulnerability was found in roxlukas LMeve and classified as critical.CVE-2021-4246 · Other software · roxlukas · reported by VulDBMedium 6.3
A vulnerability was found in roxlukas LMeve and classified as critical. Affected by this issue is some unknown functionality of the component Login Page. The manipulation of the argument X-Forwarded-For leads to sql injection. The attack may be launched remotely. The name of the patch is 29e1ead3bb1c1fad53b77dfc14534496421c5b5d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216176.
- Product
- LMeve
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 16, 2022A support user exists on the device and appears to be a backdoor for Technical Support staff.CVE-2022-47209 · Network & remote access · Netgear · reported by vulnreport@tenable.comHigh 8.8
A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for this account is “support” and cannot be changed by a user via any normally accessible means.
- Product
- Rax30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtenable.comtenable.com
Dec 16, 2022A vulnerability, which was classified as critical, has been found in y_project RuoYi 4.7.5.CVE-2022-4566 · Other software · y_project · reported by VulDBMedium 5.5
A vulnerability, which was classified as critical, has been found in y_project RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b40. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215975.
- Product
- RuoYi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 16, 2022An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity ManaCVE-2022-25627 · Other software · Broadcom · reported by secure@symantec.comMedium 6.7
An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4
- Product
- Symantec Identity Governance And Administration
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.broadcom.comsupport.broadcom.com
Dec 15, 2022A vulnerability has been found in RainyGao DocSys and classified as critical.CVE-2022-4511 · Other software · RainyGao · reported by VulDBMedium 5.3
A vulnerability has been found in RainyGao DocSys and classified as critical. Affected by this vulnerability is an unknown functionality of the component com.DocSystem.controller.UserController#getUserImg. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215851.
- Product
- DocSys
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022A vulnerability, which was classified as critical, has been found in bspkrs MCPMappingViewer.CVE-2022-4494 · Other software · bspkrs · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, has been found in bspkrs MCPMappingViewer. Affected by this issue is the function extractZip of the file src/main/java/bspkrs/mmv/RemoteZipHandler.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack may be launched remotely. The name of the patch is 6e602746c96b4756c271d080dae7d22ad804a1bd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215804.
- Product
- MCPMappingViewer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022A vulnerability classified as critical was found in scifio.CVE-2022-4493 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability classified as critical was found in scifio. Affected by this vulnerability is the function downloadAndUnpackResource of the file src/test/java/io/scif/util/DefaultSampleFilesService.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack can be launched remotely. The name of the patch is fcb0dbca0ec72b22fe0c9ddc8abc9cb188a0ff31. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215803.
- Product
- scifio
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2022A vulnerability, which was classified as critical, has been found in m0ver bible-online.CVE-2022-4454 · Other software · m0ver · reported by VulDBMedium 5.5
A vulnerability, which was classified as critical, has been found in m0ver bible-online. Affected by this issue is the function query of the file src/main/java/custom/application/search.java of the component Search Handler. The manipulation leads to sql injection. The name of the patch is 6ef0aabfb2d4ccd53fcaa9707781303af357410e. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215444.
- Product
- bible-online
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 11, 2022A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37.CVE-2022-4402 · Other software · RainyGao · reported by VulDBMedium 4.7
A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215271.
- Product
- DocSys
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 2022xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).CVE-2022-23493 · Other software · neutrinolabs · reported by GitHubCritical 9.1
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_mm_trans_process_drdynvc_channel_close() function. There are no known workarounds for this issue. Users are advised to upgrade.
- Product
- xrdp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 2022xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).CVE-2022-23484 · Other software · neutrinolabs · reported by GitHubHigh 8.2
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Integer Overflow in xrdp_mm_process_rail_update_window_text() function. There are no known workarounds for this issue. Users are advised to upgrade.
- Product
- xrdp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 2022xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).CVE-2022-23483 · Other software · neutrinolabs · reported by GitHubHigh 7.5
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in libxrdp_send_to_channel() function. There are no known workarounds for this issue. Users are advised to upgrade.
- Product
- xrdp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 2022xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).CVE-2022-23482 · Other software · neutrinolabs · reported by GitHubNone
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_sec_process_mcs_data_CS_CORE() function. There are no known workarounds for this issue. Users are advised to upgrade.
- Product
- xrdp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 2022xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).CVE-2022-23481 · Other software · neutrinolabs · reported by GitHubNone
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_caps_process_confirm_active() function. There are no known workarounds for this issue. Users are advised to upgrade.
- Product
- xrdp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 2022xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).CVE-2022-23480 · Other software · neutrinolabs · reported by GitHubCritical 9.1
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in devredir_proc_client_devlist_announce_req() function. There are no known workarounds for this issue. Users are advised to upgrade.
- Product
- xrdp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 2022xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).CVE-2022-23479 · Other software · neutrinolabs · reported by GitHubCritical 9.1
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_mm_chan_data_in() function. There are no known workarounds for this issue. Users are advised to upgrade.
- Product
- xrdp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 2022xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).CVE-2022-23478 · Other software · neutrinolabs · reported by GitHubCritical 9.1
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Write in xrdp_mm_trans_process_drdynvc_channel_open() function. There are no known workarounds for this issue. Users are advised to upgrade.
- Product
- xrdp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 2022xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).CVE-2022-23477 · Other software · neutrinolabs · reported by GitHubCritical 9.1
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in audin_send_open() function. There are no known workarounds for this issue. Users are advised to upgrade.
- Product
- xrdp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 2022xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).CVE-2022-23468 · Other software · neutrinolabs · reported by GitHubMedium 6.5
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_login_wnd_create() function. There are no known workarounds for this issue. Users are advised to upgrade.
- Product
- xrdp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2022Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls.CVE-2022-38765 · Other software · Canon · reported by MITREMedium 6.5
Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter.
- Product
- Vitrea View
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvitalimages.comvitalimages.com
Dec 8, 2022Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of anCVE-2022-39910 · Computers, phones & browsers · Samsung Mobile · reported by mobile.security@samsung.comLow 3.9
Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view.
- Product
- Samsung Pass
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.samsungmobile.comsecurity.samsungmobile.com
Dec 8, 2022Improper access control vulnerability in Nice Catch prior to SMR Dec-2022 Release 1 allows physical attackers to access contents of all toast generated in the aCVE-2022-39900 · Computers, phones & browsers · Samsung Mobile · reported by mobile.security@samsung.comMedium 4.6
Improper access control vulnerability in Nice Catch prior to SMR Dec-2022 Release 1 allows physical attackers to access contents of all toast generated in the application installed in Secure Folder through Nice Catch.
- Product
- Samsung Mobile Devices
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.samsungmobile.comsecurity.samsungmobile.com
Dec 7, 2022go-libp2p is the offical libp2p implementation in the Go programming language.CVE-2022-23492 · Other software · libp2p · reported by GitHubHigh 7.5
go-libp2p is the offical libp2p implementation in the Go programming language. Version `0.18.0` and older of go-libp2p are vulnerable to targeted resource exhaustion attacks. These attacks target libp2p’s connection, stream, peer, and memory management. An attacker can cause the allocation of large amounts of memory, ultimately leading to the process getting killed by the host’s operating system. While a connection manager tasked with keeping the number of connections within manageable limits has been part of go-libp2p, this component was designed to handle the regular churn of peers, not a targeted resource exhaustion attack. Users are advised to upgrade their version of go-libp2p to version `0.18.1` or newer. Users unable to upgrade may consult the denial of service (dos) mitigation page for more information on how to incorporate mitigation strategies, monitor your application, and respond to attacks.
- Product
- go-libp2p
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.libp2p.iogithub.com
Dec 7, 2022A vulnerability, which was classified as critical, was found in maku-boot up to 2.2.0.CVE-2022-4322 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, was found in maku-boot up to 2.2.0. This affects the function doExecute of the file AbstractScheduleJob.java of the component Scheduled Task Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 446eb7294332efca2bfd791bc37281cedac0d0ff. It is recommended to apply a patch to fix this issue. The identifier VDB-215013 was assigned to this vulnerability.
- Product
- maku-boot
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2022A vulnerability was found in SpringBootCMS and classified as critical.CVE-2022-4282 · Other software · unspecified · reported by VulDBMedium 4.7
A vulnerability was found in SpringBootCMS and classified as critical. Affected by this issue is some unknown functionality of the component Template Management. The manipulation leads to injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-214790 is the identifier assigned to this vulnerability.
- Product
- SpringBootCMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2022A vulnerability has been found in Facepay 1.0 and classified as critical.CVE-2022-4281 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability has been found in Facepay 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /face-recognition-php/facepay-master/camera.php. The manipulation of the argument userId leads to authorization bypass. The attack can be launched remotely. The identifier VDB-214789 was assigned to this vulnerability.
- Product
- Facepay
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2022A vulnerability was found in House Rental System and classified as critical.CVE-2022-4276 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument id_photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214772.
- Product
- House Rental System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2022A vulnerability has been found in House Rental System and classified as critical.CVE-2022-4275 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an unknown functionality of the file search-property.php of the component POST Request Handler. The manipulation of the argument search_property leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214771.
- Product
- House Rental System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2022A vulnerability, which was classified as critical, was found in House Rental System.CVE-2022-4274 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, was found in House Rental System. Affected is an unknown function of the file /view-property.php. The manipulation of the argument property_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-214770 is the identifier assigned to this vulnerability.
- Product
- House Rental System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2022A vulnerability, which was classified as critical, has been found in FeMiner wms.CVE-2022-4272 · Other software · FeMiner · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/savenewproduct.php?flag=1. The manipulation of the argument upfile leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214760.
- Product
- wms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comgithub.com
Dec 1, 2022A vulnerability, which was classified as critical, has been found in Movie Ticket Booking System.CVE-2022-4248 · Other software · unspecified · reported by VulDBMedium 5
A vulnerability, which was classified as critical, has been found in Movie Ticket Booking System. This issue affects some unknown processing of the file editBooking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214625 was assigned to this vulnerability.
- Product
- Movie Ticket Booking System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 1, 2022A vulnerability classified as critical was found in Movie Ticket Booking System.CVE-2022-4247 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability classified as critical was found in Movie Ticket Booking System. This vulnerability affects unknown code of the file booking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214624.
- Product
- Movie Ticket Booking System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 30, 2022A vulnerability was found in Sapido BR270n, BRC76n, GR297 and RB1732 and classified as critical.CVE-2021-4242 · Network & remote access · Sapido · reported by VulDBMedium 6.3
A vulnerability was found in Sapido BR270n, BRC76n, GR297 and RB1732 and classified as critical. Affected by this issue is some unknown functionality of the file ip/syscmd.htm. The manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214592.
- Product
- BR270n
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.csdn.netgithub.com
Nov 25, 2022An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during tCVE-2022-38767 · Other software · Siemens · reported by MITREHigh 7.5
An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure.
- Product
- SIPROTEC 5 6MD85 (CP300)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport2.windriver.comwindriver.com
Nov 24, 2022A vulnerability was found in rickxy Stock Management System and classified as critical.CVE-2022-4088 · Other software · rickxy · reported by VulDBHigh 7.3
A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some unknown functionality of the file /pages/processlogin.php. The manipulation of the argument user/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-214322 is the identifier assigned to this vulnerability.
- Product
- Stock Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 23, 2022A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memCVE-2022-44789 · Other software · Artifex · reported by MITREHigh 8.8
A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file.
- Product
- Mujs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 23, 2022xwiki-platform-icon-ui is vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection').CVE-2022-41931 · Other software · xwiki · reported by GitHubCritical 9.9
xwiki-platform-icon-ui is vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection'). Any user with view rights on commonly accessible documents including the icon picker macro can execute arbitrary Groovy, Python or Velocity code in XWiki due to improper neutralization of the macro parameters of the icon picker macro. The problem has been patched in XWiki 13.10.7, 14.5 and 14.4.2. Workarounds: The [patch](https://github.com/xwiki/xwiki-platform/commit/47eb8a5fba550f477944eb6da8ca91b87eaf1d01) can be manually applied by editing `IconThemesCode.IconPickerMacro` in the object editor. The whole document can also be replaced by the current version by importing the document from the XAR archive of a fixed version as the only changes to the document have been security fixes and small formatting changes.
- Product
- xwiki-platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 23, 2022XWiki Platform vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml.CVE-2022-41928 · Other software · xwiki · reported by GitHubCritical 9.9
XWiki Platform vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml. The issue can also be reproduced by inserting the dangerous payload in the `height` or `alt` macro properties. This has been patched in versions 13.10.7, 14.4.2, and 14.5. The issue can be fixed on a running wiki by updating `XWiki.AttachmentSelector` with the versions below: - 14.5-rc-1+: https://github.com/xwiki/xwiki-platform/commit/eb15147adf94bddb92626f862c1710d45bcd64a7#diff-e1513599ab698991f6cbba55d38f3f464432ced8d137a668b1f7618c7e747e23 - 14.4.2+: https://github.com/xwiki/xwiki-platform/commit/c02f8eb1f3c953d124f2c097021536f8bc00fa8d#diff-e1513599ab698991f6cbba55d38f3f464432ced8d137a668b1f7618c7e747e23 - 13.10.7+: https://github.com/xwiki/xwiki-platform/commit/efd0df0468d46149ba68b66660b93f31b6318515#diff-e1513599ab698991f6cbba55d38f3f464432ced8d137a668b1f7618c7e747e23
- Product
- xwiki-platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comjira.xwiki.org
Nov 23, 2022CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabled remote code execuCVE-2022-23740 · Other software · GitHub · reported by product-cna@github.comHigh 8.8
CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. To exploit this vulnerability, an attacker would need permission to create and build GitHub Pages using GitHub Actions. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.
- Product
- GitHub Enterprise Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.github.comdocs.github.com
Nov 18, 2022Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to obtain critical informationCVE-2022-24037 · Other software · Karmasis Informatics · reported by iletisim@usom.gov.trHigh 8.2
Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to obtain critical information.
- Product
- Infraskope SIEM+
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordkarmasis.comsiberguvenlik.gov.tr
Nov 17, 2022A vulnerability was found in Student Attendance Management System and classified as critical.CVE-2022-4052 · Other software · unspecified · reported by VulDBMedium 4.7
A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some unknown processing of the file /Admin/createClass.php. The manipulation of the argument Id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213845 was assigned to this vulnerability.
- Product
- Student Attendance Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 17, 2022A vulnerability has been found in Hostel Searching Project and classified as critical.CVE-2022-4051 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknown code of the file view-property.php. The manipulation of the argument property_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-213844.
- Product
- Hostel Searching Project
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 16, 2022Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.CVE-2022-4018 · Other software · ikus060 · reported by security@huntr.devMedium 4.3
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
- Product
- ikus060/rdiffweb
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 16, 2022A vulnerability, which was classified as critical, was found in Sports Club Management System 119.CVE-2022-4015 · Other software · unspecified · reported by VulDBMedium 4.7
A vulnerability, which was classified as critical, was found in Sports Club Management System 119. This affects an unknown part of the file admin/make_payments.php. The manipulation of the argument m_id/plan leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213789 was assigned to this vulnerability.
- Product
- Sports Club Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 16, 2022A vulnerability classified as critical has been found in Hospital Management Center.CVE-2022-4012 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability classified as critical has been found in Hospital Management Center. Affected is an unknown function of the file patient-info.php. The manipulation of the argument pt_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-213786 is the identifier assigned to this vulnerability.
- Product
- Hospital Management Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 15, 2022A vulnerability, which was classified as critical, was found in MonikaBrzica scm.CVE-2022-3998 · Other software · MonikaBrzica · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, was found in MonikaBrzica scm. This affects an unknown part of the file uredi_korisnika.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213699.
- Product
- scm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 15, 2022A vulnerability, which was classified as critical, has been found in MonikaBrzica scm.CVE-2022-3997 · Other software · MonikaBrzica · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, has been found in MonikaBrzica scm. Affected by this issue is some unknown functionality of the file upis_u_bazu.php. The manipulation of the argument email/lozinka/ime/id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-213698 is the identifier assigned to this vulnerability.
- Product
- scm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 13, 2022A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical.CVE-2022-3976 · Other software · MZ Automation · reported by VulDBMedium 5.5
A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/iso_mms/client/mms_client_files.c of the component MMS File Services. The manipulation of the argument filename leads to path traversal. Upgrading to version 1.5 is able to address this issue. The name of the patch is 10622ba36bb3910c151348f1569f039ecdd8786f. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213556.
- Product
- libiec61850
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 13, 2022A vulnerability classified as critical was found in Axiomatic Bento4.CVE-2022-3974 · Other software · Axiomatic · reported by VulDBMedium 6.3
A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4_StdcFileByteStream::ReadPartial of the file Ap4StdCFileByteStream.cpp of the component mp4info. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213553 was assigned to this vulnerability.
- Product
- Bento4
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.