| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Editor Arbitrary File Deletion in Fluent Boards Pro <= 2.0.11 versions. |
| Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions. |
| Subscriber Cross Site Scripting (XSS) in Fluent Boards Pro <= 2.0.11 versions. |
| Editor Privilege Escalation in FluentCRM Pro <= 3.1.12 versions. |
| Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions. |
| Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions. |
| Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.17 versions. |
| In the Linux kernel, the following vulnerability has been resolved:
xfs: avoid UAF on sc->tempip in xrep_tempfile_create
LOLLM noticed a potential UAF if the tempfile creation code fails after
it set sc->tempip. Fix that. |
| Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor.
Spring Cloud Gateway 5.0.0 - 5.0.2
Spring Cloud Gateway 4.3.0 - 4.3.5
Spring Cloud Gateway 4.0.0 - 4.2.9
Spring Cloud Gateway 3.1.13 and earlier |
| Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions. |
| Subscriber Sensitive Data Exposure in SureFeedback Client Site <= 1.2.12 versions. |
| Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions. |
| Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions. |
| Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions. |
| Unauthenticated SQL Injection in Epayco <= 8.4.6 versions. |
| Contributor PHP Object Injection in Booking and Rental Manager <= 2.7.5 versions. |
| Unauthenticated Broken Access Control in Mobile App for WooCommerce <= 0.4.62 versions. |
| Subscriber Broken Access Control in Push Notification for Post and BuddyPress <= 3.20 versions. |
| In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrator shell, or gain full control over the system. |
| In the Linux kernel, the following vulnerability has been resolved:
sctp: validate cookie AUTH state before use
When cookie authentication is disabled, COOKIE_ECHO restores fixed-size
AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM
length, HMAC list, or CHUNKS list can then reach association consumers
with lengths or identifiers that were never validated against the local
backing arrays.
A forged RANDOM length can cause out-of-bounds reads during key-vector
construction. A forged HMAC identifier also caused a 32-byte write past
a zero-length AUTH chunk, providing a primitive for a local privilege
escalation chain.
Validate the cookie's RANDOM, HMACS, and CHUNKS parameters at the cookie
trust boundary before copying them into the association. Reject invalid
types, malformed lengths, unsupported HMAC identifiers, HMAC lists
without SHA1, and forbidden chunk ids. |
