Day: August 17, 2021

GPAC Advanced Content 1.0.1 stri_box_read Remote Code Execution

A vulnerability was found in GPAC Advanced Content 1.0.1 and classified as critical. There is no information about possible countermeasures

Common Vulnerabilities and Exposures

GPAC Advanced Content 1.0.1 MPEG-4 heap-based overflow

A vulnerability was found in GPAC Advanced Content 1.0.1. It has been declared as critical. This vulnerability affects an unknown

Common Vulnerabilities and Exposures

Dell EMC PowerScale OneFS 8.2.x/9.1.0.x Log File log file

A vulnerability was found in Dell EMC PowerScale OneFS 8.2.x/9.1.0.x. It has been rated as problematic. This issue affects an

Common Vulnerabilities and Exposures

Dell EMC PowerScale OneFS up to 9.2.x default permission [CVE-2021-36281]

A vulnerability classified as critical has been found in Dell EMC PowerScale OneFS up to 9.2.x. Affected is an unknown

Common Vulnerabilities and Exposures

Shopware up to 6.4.3.0 SVG Media File cross site scripting

A vulnerability classified as problematic was found in Shopware up to 6.4.3.0. Affected by this vulnerability is some unknown processing

Common Vulnerabilities and Exposures

Tranquil WAPT Enterprise prior 1.8.2.7373/2.0.0.9450 access control

A vulnerability, which was classified as critical, has been found in Tranquil WAPT Enterprise. Affected by this issue is an

Common Vulnerabilities and Exposures

Lin-CMS-Flask 0.1.1 app/api/cms/user.py Username cross site scripting

A vulnerability, which was classified as problematic, was found in Lin-CMS-Flask 0.1.1 (Content Management System). This affects an unknown functionality

Common Vulnerabilities and Exposures

Intel BSSA DFT initialization [CVE-2021-0114]

A vulnerability has been found in Intel BSSA (the affected version is unknown) and classified as problematic. This vulnerability affects

Common Vulnerabilities and Exposures

Shopware up to 6.4.3.0 API input validation

A vulnerability was found in Shopware up to 6.4.3.0 and classified as problematic. This issue affects an unknown part of

Common Vulnerabilities and Exposures

Shopware up to 6.4.3.0 server-side request forgery [CVE-2021-37711]

A vulnerability was found in Shopware up to 6.4.3.0. It has been classified as critical. Affected is an unknown code.

Common Vulnerabilities and Exposures

Moova Plugin up to 3.5 on WooCommerce Parameter ~/Checkout/Checkout.php lat cross site scripting

A vulnerability classified as problematic has been found in Moova Plugin up to 3.5 on WooCommerce. Affected is an unknown

Common Vulnerabilities and Exposures

SEOPress Plugin 5.0.0/5.0.1/5.0.2/5.0.3 on WordPress TitleDescriptionMeta.php processPut cross site scripting

A vulnerability classified as problematic was found in SEOPress Plugin 5.0.0/5.0.1/5.0.2/5.0.3 on WordPress (WordPress Plugin). Affected by this vulnerability is

Common Vulnerabilities and Exposures

Smart Email Alerts Plugin up to 1.0.10 on WordPress ~/views/settings.php api_key cross site scripting

A vulnerability, which was classified as problematic, has been found in Smart Email Alerts Plugin up to 1.0.10 on WordPress

Common Vulnerabilities and Exposures

Skaut Bazar Plugin up to 1.3.2 on WordPress ~/skaut-bazar.php $_SERVER['PHP_SELF'] cross site scripting

A vulnerability, which was classified as problematic, was found in Skaut Bazar Plugin up to 1.3.2 on WordPress (WordPress Plugin).

Common Vulnerabilities and Exposures

Multiplayer Games Plugin up to 3.7 on WordPress ~/multiplayergames.php $_SERVER['PHP_SELF'] cross site scripting

A vulnerability has been found in Multiplayer Games Plugin up to 3.7 on WordPress (WordPress Plugin) and classified as problematic.

Common Vulnerabilities and Exposures

Simple Behance Portfolio Plugin up to 0.2 on WordPress Parameter iframe-font-preview.php dark cross site scripting

A vulnerability was found in Simple Behance Portfolio Plugin up to 0.2 on WordPress (WordPress Plugin) and classified as problematic.

Common Vulnerabilities and Exposures

Scribble Maps Plugin up to 1.2 on WordPress Parameter ~/includes/admin.php map cross site scripting

A vulnerability was found in Scribble Maps Plugin up to 1.2 on WordPress (WordPress Plugin). It has been classified as

Common Vulnerabilities and Exposures

Media Usage Plugin up to 0.0.4 on WordPress Parameter ~/mmu_admin.php id cross site scripting

A vulnerability was found in Media Usage Plugin up to 0.0.4 on WordPress (WordPress Plugin). It has been declared as

Common Vulnerabilities and Exposures

WP Fountain Plugin up to 1.5.9 on WordPress Scripting ~/wp-fountain.php $_SERVER['PHP_SELF'] cross site scripting

A vulnerability was found in WP Fountain Plugin up to 1.5.9 on WordPress (WordPress Plugin). It has been rated as

Common Vulnerabilities and Exposures

Custom Post Type Relations Plugin up to 1.0 on WordPress Parameter ~/pages/admin-page.php cptr[name] cross site scripting

A vulnerability classified as problematic was found in Custom Post Type Relations Plugin up to 1.0 on WordPress (WordPress Plugin).

Common Vulnerabilities and Exposures

HTML5 Webcam Videochat Plugin up to 5.2.7 on WordPress ~/inc/requirements.php vws_notice cross site scripting

A vulnerability, which was classified as problematic, has been found in HTML5 Webcam Videochat Plugin up to 5.2.7 on WordPress

Common Vulnerabilities and Exposures

2TypoFR Plugin up to 0.11 on WordPress index.php text cross site scripting

A vulnerability, which was classified as problematic, was found in 2TypoFR Plugin up to 0.11 on WordPress (WordPress Plugin). Affected

Common Vulnerabilities and Exposures

Simple Popup Newsletter Plugin up to 1.4.7 on WordPress simple-popup-newsletter.php $_SERVER['PHP_SELF'] cross site scripting

A vulnerability has been found in Simple Popup Newsletter Plugin up to 1.4.7 on WordPress (WordPress Plugin) and classified as