Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
71 results · page 1 of 2
Sep 29, 2026A vulnerability was identified in realjerrytang tacomall 1.0.0.CVE-2026-102293 · Other software · realjerrytang · reported by VulDBMedium 5.5
A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Backend. The manipulation of the argument isAdmin/jobId leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
- Product
- tacomall
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 28, 2026Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tangible Loops & Logic.CVE-2026-82123 · Other software · Tangible · reported by vulnreport@tenable.comMedium 6.5
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tangible Loops & Logic.
- Product
- Loops & Logic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 5, 2026Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from ['pwd'] with no sanitization and concatenates it into a raCVE-2026-71237 · Other software · Miantang · reported by 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2cCritical 9.8
Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from ['pwd'] with no sanitization and concatenates it into a raw SQL string: mysql_query("select * from userlists where username='' and password='' limit 1"). An unauthenticated attacker can submit a payload such as pwd=' OR '1'='1 to bypass authentication and, via UNION-based injection, extract arbitrary data from the database.
- Product
- IoT-PHP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 17, 2026Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions.CVE-2026-40751 · WordPress plugins & themes · reported by PatchstackHigh 8.1
Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions.
- Affected
- up to 1.2
- What to do
- Affects up to 1.2. Update the plugin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Feb 11, 2026Microtango: Stored Cross-Site ScriptingCVE-2026-1821 · WordPress plugins & themes · reported by WordfenceMedium 6.4
The Microtango plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'restkey' parameter of the mt_reservation shortcode in all versions up to, and including, 0.9.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Product
- Microtango
- Affected
- up to 0.9.29
- What to do
- Affects up to 0.9.29. Update Microtango to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Nov 27, 2025Mustang before 2.16.3 allows exfiltrating files via XXE attacks.CVE-2025-66372 · Other software · mustangproject · reported by MITRELow 2.8
Mustang before 2.16.3 allows exfiltrating files via XXE attacks.
- Product
- Mustang
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 10, 2025ktg-mes before commit a484f96 (2025-07-03) has a fastjson deserialization vulnerability.CVE-2025-63617 · Other software · Kutangguo · reported by MITREMedium 6.5
ktg-mes before commit a484f96 (2025-07-03) has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data.
- Product
- Ktg-mes
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Nov 4, 2025Centangle-Team: Cross-Site Request ForgeryCVE-2025-12456 · WordPress plugins & themes · reported by WordfenceMedium 6.1
The Centangle-Team plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to modify plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additionally, due to insufficient input sanitization and output escaping on cai_name_color parameter, this issue allows to inject arbitrary web scripts in pages, that will execute whenever a user accesses an injected page.
- Product
- Centangle-Team
- Affected
- up to 1.0.0
- What to do
- Affects up to 1.0.0. Update Centangle-Team to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Apr 15, 2025code-gen <=2.0.6 is vulnerable to Incorrect Access Control.CVE-2025-29705 · Other software · Tanghc · reported by MITREMedium 4.3
code-gen <=2.0.6 is vulnerable to Incorrect Access Control. The project does not have permission control allowing anyone to access such projects.
- Product
- Code-gen
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 20, 2025A Denial of Service (DoS) vulnerability in the file upload feature of stangirard/quivr v0.0.298 allows unauthenticated attackers to cause excessive resource conCVE-2024-9229 · Other software · stangirard · reported by security@huntr.devHigh 7.5
A Denial of Service (DoS) vulnerability in the file upload feature of stangirard/quivr v0.0.298 allows unauthenticated attackers to cause excessive resource consumption by appending characters to the end of a multipart boundary in an HTTP request. This leads to the server continuously processing each character, rendering the service unavailable and impacting all users.
- Product
- stangirard/quivr
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 20, 2025A path traversal vulnerability exists in the latest version of stangirard/quivr.CVE-2024-6583 · Other software · stangirard · reported by security@huntr.devMedium 4.3
A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.
- Product
- stangirard/quivr
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 11, 2025A vulnerability was found in aitangbao springboot-manager 3.0 and classified as problematic.CVE-2025-2211 · Other software · aitangbao · reported by VulDBMedium 4.8
A vulnerability was found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sysDictDetail/add. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- springboot-manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 11, 2025A vulnerability has been found in aitangbao springboot-manager 3.0 and classified as problematic.CVE-2025-2210 · Other software · aitangbao · reported by VulDBMedium 4.8
A vulnerability has been found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /sysJob/add. The manipulation of the argument name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- springboot-manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 11, 2025A vulnerability, which was classified as problematic, was found in aitangbao springboot-manager 3.0.CVE-2025-2209 · Other software · aitangbao · reported by VulDBMedium 4.8
A vulnerability, which was classified as problematic, was found in aitangbao springboot-manager 3.0. Affected is an unknown function of the file /sysDict/add. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- springboot-manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 11, 2025A vulnerability, which was classified as problematic, has been found in aitangbao springboot-manager 3.0.CVE-2025-2208 · Other software · aitangbao · reported by VulDBMedium 4.8
A vulnerability, which was classified as problematic, has been found in aitangbao springboot-manager 3.0. This issue affects some unknown processing of the file /sysFiles/upload of the component Filename Handler. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- springboot-manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 11, 2025A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0.CVE-2025-2207 · Other software · aitangbao · reported by VulDBMedium 4.8
A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unknown code of the file /sys/dept. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- springboot-manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 11, 2025A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0.CVE-2025-2206 · Other software · aitangbao · reported by VulDBMedium 4.8
A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0. This affects an unknown part of the file /sys/permission. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- springboot-manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 7, 2025operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that caCVE-2025-27839 · Other software · Tangem · reported by MITRELow 3.2
operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that causes verification results to be disregarded during the first scan of a card. Exploitation may not have been possible.
- Product
- SDK
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2024A vulnerability was found in WISI Tangram GT31 up to 20241214 and classified as problematic.CVE-2024-12989 · Other software · WISI · reported by VulDBMedium 6.9
A vulnerability was found in WISI Tangram GT31 up to 20241214 and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP Request Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- Tangram GT31
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 24, 2024A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to access and exfiltrate all previous and suCVE-2024-48145 · Other software · netangular · reported by MITRECritical 9.1
A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.
- Product
- chatnet_ai
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordapps.microsoft.comgithub.com
Jul 7, 2024A stored cross-site scripting (XSS) vulnerability exists in the 'Upload Knowledge' feature of stangirard/quivr, affecting the latest version.CVE-2024-6229 · Other software · stangirard · reported by security@huntr.devMedium 5.4
A stored cross-site scripting (XSS) vulnerability exists in the 'Upload Knowledge' feature of stangirard/quivr, affecting the latest version. Users can upload files via URL, which allows the insertion of malicious JavaScript payloads. These payloads are stored on the server and executed whenever any user clicks on a link containing the payload, leading to potential data theft, session hijacking, and reputation damage.
- Product
- stangirard/quivr
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 27, 2024stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability.CVE-2024-5885 · Other software · stangirard · reported by security@huntr.devHigh 8.6
stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. The application does not provide sufficient controls when crawling a website, allowing an attacker to access applications on the local network. This vulnerability could allow a malicious user to gain access to internal servers, the AWS metadata endpoint, and capture Supabase data.
- Product
- stangirard/quivr
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 6, 2024A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networCVE-2024-4851 · Other software · stangirard · reported by security@huntr.devHigh 7.7
A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. The vulnerability is present in the crawl endpoint where the 'url' parameter can be manipulated to send HTTP requests to arbitrary URLs, thereby facilitating SSRF attacks. The affected code is located in the backend/routes/crawl_routes.py file, specifically within the crawl_endpoint function. This issue could allow attackers to interact with internal services that are accessible from the server hosting the application.
- Product
- stangirard/quivr
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 17, 2024FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw_block_rectangle function of libavfilter/vf_codecview.c.CVE-2024-31582 · Other software · ffmpeg · reported by MITREHigh 7.8
FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw_block_rectangle function of libavfilter/vf_codecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service (DoS) via crafted input.
- Product
- ffmpeg
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Feb 1, 2024springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/role.CVE-2024-24062 · Other software · Aitangbao · reported by MITREMedium 5.4
springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/role.
- Product
- Springboot-manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 1, 2024springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sysContent/add.CVE-2024-24061 · Other software · Aitangbao · reported by MITREMedium 5.4
springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sysContent/add.
- Product
- Springboot-manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 1, 2024springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/user.CVE-2024-24060 · Other software · Aitangbao · reported by MITREMedium 5.4
springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/user.
- Product
- Springboot-manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 1, 2024springboot-manager v1.6 is vulnerable to Arbitrary File Upload.CVE-2024-24059 · Other software · Aitangbao · reported by MITREMedium 5.4
springboot-manager v1.6 is vulnerable to Arbitrary File Upload. The system does not filter the suffixes of uploaded files.
- Product
- Springboot-manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 2, 2023Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token.CVE-2023-31579 · Other software · Tangyh · reported by MITRECritical 9.8
Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token.
- Product
- Lamp-cloud
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 11, 2023A race condition exists in the Tang server functionality for key generation and key rotation.CVE-2023-1672 · Other software · Red Hat · reported by Red HatMedium 5.3
A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.
- Product
- Red Hat Enterprise Linux 7
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.combugzilla.redhat.com
Jun 28, 2023Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload.CVE-2023-34736 · Other software · Guantang Equipment Management System Project · reported by MITREHigh 7.2
Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload.
- Product
- Guantang Equipment Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 23, 2023jcvi is a Python library to facilitate genome assembly, annotation, and comparative genomics.CVE-2023-35932 · Other software · tanghaibao · reported by GitHubHigh 7.1
jcvi is a Python library to facilitate genome assembly, annotation, and comparative genomics. A configuration injection happens when user input is considered by the application in an unsanitized format and can reach the configuration file. A malicious user may craft a special payload that may lead to a command injection. The impact of a configuration injection may vary. Under some conditions, it may lead to command injection if there is for instance shell code execution from the configuration file values. This vulnerability does not currently have a fix.
- Product
- jcvi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 21, 2023textAngular is a text editor for Angular.js.CVE-2021-32854 · Other software · npm · reported by GitHubMedium 6.1
textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches.
- Product
- textangular
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecuritylab.github.comsecuritylab.github.com
Jul 26, 2022untangle is a python library to convert XML data to python objects.CVE-2022-33977 · Other software · Christian Stefanescu · reported by vultures@jpcert.or.jpHigh 7.5
untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service (DoS) condition on the server where the product is running.
- Product
- untangle
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 26, 2022untangle is a python library to convert XML data to python objects.CVE-2022-31471 · Other software · Christian Stefanescu · reported by vultures@jpcert.or.jpHigh 7.5
untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files.
- Product
- untangle
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 22, 2022The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.CVE-2022-34981 · Other software · Pycrowdtangle Project · reported by MITRECritical 9.8
The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
- Product
- Pycrowdtangle
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Mar 2, 2022A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys.CVE-2021-4076 · Other software · Tang Project · reported by Red HatHigh 7.5
A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys.
- Product
- Tang
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.redhat.comgithub.com
May 27, 2021A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and otherCVE-2020-22017 · Other software · Ffmpeg · reported by MITREHigh 8.8
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences.
- Product
- Ffmpeg
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcwe.mitre.orgtrac.ffmpeg.org
Dec 18, 2020In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated.CVE-2020-26178 · Other software · Tangro · reported by MITREMedium 5.3
In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated.
- Product
- Business Workflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2020In tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed out and thus are not intended to be edited by regular users.CVE-2020-26177 · Other software · Tangro · reported by MITREMedium 4.3
In tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed out and thus are not intended to be edited by regular users. However, this restriction is only applied client-side. Manipulating any of the greyed-out values in requests to /api/profile is not prohibited server-side.
- Product
- Business Workflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2020An issue was discovered in tangro Business Workflow before 1.18.1.CVE-2020-26176 · Other software · Tangro · reported by MITREMedium 4.3
An issue was discovered in tangro Business Workflow before 1.18.1. No (or broken) access control checks exist on the /api/document/<DocumentID>/attachments API endpoint. Knowing a document ID, an attacker can list all the attachments of a workitem, including their respective IDs. This allows the attacker to gather valid attachment IDs for workitems that do not belong to them.
- Product
- Business Workflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2020In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile in order to change profile information of CVE-2020-26175 · Other software · Tangro · reported by MITREMedium 6.5
In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile in order to change profile information of other users.
- Product
- Business Workflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2020tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to the filetypes contained in this list.CVE-2020-26174 · Other software · Tangro · reported by MITREHigh 8.8
tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to the filetypes contained in this list. However, this restriction is enforced in the browser (client-side) and can be circumvented. This allows an attacker to upload any file as an attachment to a workitem.
- Product
- Business Workflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2020An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents (PDF) by providing a valid documenCVE-2020-26173 · Other software · Tangro · reported by MITRELow 3.1
An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents (PDF) by providing a valid document ID and token. No further authentication is required.
- Product
- Business Workflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2020Every login in tangro Business Workflow before 1.18.1 generates the same JWT token, which allows an attacker to reuse the token when a session is active.CVE-2020-26172 · Other software · Tangro · reported by MITREMedium 4.2
Every login in tangro Business Workflow before 1.18.1 generates the same JWT token, which allows an attacker to reuse the token when a session is active. The JWT token does not contain an expiration timestamp.
- Product
- Business Workflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2020In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can be manipulated.CVE-2020-26171 · Other software · Tangro · reported by MITREMedium 4.3
In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can be manipulated. By doing this, users can add attachments to workitems that do not belong to them.
- Product
- Business Workflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 12, 2020Untangle Firewall NG before 16.0 uses MD5 for passwords.CVE-2020-17494 · Other software · Untangle · reported by MITREMedium 5.3
Untangle Firewall NG before 16.0 uses MD5 for passwords.
- Product
- Untangle Firewall NG
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 14, 2019When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS.CVE-2019-18649 · Other software · Untangle · reported by MITREMedium 4.8
When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS.
- Product
- NG Firewall
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgist.github.com
Nov 14, 2019When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields.CVE-2019-18648 · Other software · Untangle · reported by MITREMedium 4.8
When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields.
- Product
- NG Firewall
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgist.github.com
Nov 14, 2019The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user.CVE-2019-18647 · Other software · Untangle · reported by MITREHigh 7.2
The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user.
- Product
- NG Firewall
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgist.github.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.