Day: October 18, 2021

SignalWirer Freeswitch up to 1.10.5 sofia.c sofia_handle_sip_i_notify information disclosure

A vulnerability was found in SignalWirer Freeswitch up to 1.10.5. It has been classified as problematic. Affected is the function

Common Vulnerabilities and Exposures

vm2 up to 3.9.3 Prototype sandbox

A vulnerability was found in vm2 up to 3.9.3. It has been declared as critical. Affected by this vulnerability is

Common Vulnerabilities and Exposures

ASUSTek ZenBook Pro Due 15 UX582 up to 203 permission [CVE-2021-42055]

A vulnerability was found in ASUSTek ZenBook Pro Due 15 UX582 up to 203. It has been rated as critical.

SaaS Security

SaaS Security Best Practices to Protect APIs

Software-as-a-service (SaaS) security is usually considered as the basic process of users surfing the web. Digging a little deeper reveals

Common Vulnerabilities and Exposures

IBM Business Automation Workflow 18.0/19.0/20.0/21.0 Web UI cross site scripting

A vulnerability was found in IBM Business Automation Workflow 18.0/19.0/20.0/21.0 (Automation Software). It has been declared as problematic. Affected by

Common Vulnerabilities and Exposures

LearnPress Plugin up to 4.1.3.0 on WordPress cross site scripting

A vulnerability was found in LearnPress Plugin up to 4.1.3.0 on WordPress (WordPress Plugin). It has been rated as problematic.

Common Vulnerabilities and Exposures

DearFlip Plugin up to 1.7.9 on WordPress Shortcode cross site scripting

A vulnerability classified as problematic has been found in DearFlip Plugin up to 1.7.9 on WordPress (WordPress Plugin). This affects

Common Vulnerabilities and Exposures

Compact WP Audio Player Plugin up to 1.9.6 on WordPress Shortcode cross site scripting

A vulnerability classified as problematic was found in Compact WP Audio Player Plugin up to 1.9.6 on WordPress (WordPress Plugin).

Common Vulnerabilities and Exposures

Compact WP Audio Player Plugin up to 1.9.6 on WordPress cross-site request forgery

A vulnerability, which was classified as problematic, has been found in Compact WP Audio Player Plugin up to 1.9.6 on

Common Vulnerabilities and Exposures

Shared Files Plugin up to 1.6.56 on WordPress Setting cross site scripting

A vulnerability, which was classified as problematic, was found in Shared Files Plugin up to 1.6.56 on WordPress (WordPress Plugin).

Common Vulnerabilities and Exposures

Tutor LMS Plugin up to 1.9.8 on WordPress Setting cross site scripting

A vulnerability has been found in Tutor LMS Plugin up to 1.9.8 on WordPress (WordPress Plugin) and classified as problematic.

Common Vulnerabilities and Exposures

Podcast Subscribe Buttons Plugin up to 1.4.1 on WordPress Post cross site scripting

A vulnerability was found in Podcast Subscribe Buttons Plugin up to 1.4.1 on WordPress (WordPress Plugin) and classified as problematic.

Common Vulnerabilities and Exposures

Gutenberg PDF Viewer Block Plugin up to 1.0.0 on WordPress cross site scripting

A vulnerability was found in Gutenberg PDF Viewer Block Plugin up to 1.0.0 on WordPress (Document Reader Software). It has

Common Vulnerabilities and Exposures

PlanSo Forms Plugin up to 2.6.3 on WordPress Form cross site scripting

A vulnerability was found in PlanSo Forms Plugin up to 2.6.3 on WordPress (WordPress Plugin). It has been declared as

Common Vulnerabilities and Exposures

Wp Cookie Choice Plugin up to 1.1.0 on WordPress Attribute arbitrary cross-site request forgery

A vulnerability was found in Wp Cookie Choice Plugin up to 1.1.0 on WordPress (WordPress Plugin). It has been rated

Common Vulnerabilities and Exposures

Wechat Reward Plugin up to 1.7 on WordPress QR Setting cross-site request forgery

A vulnerability classified as problematic has been found in Wechat Reward Plugin up to 1.7 on WordPress (WordPress Plugin). Affected

Common Vulnerabilities and Exposures

Apache Superset up to 1.1 on Explore Page cross site scripting

A vulnerability classified as problematic was found in Apache Superset up to 1.1 on Explore Page. Affected by this vulnerability

Common Vulnerabilities and Exposures

strongSwan up to 5.9.3 In-memory Certificate Cache integer overflow

A vulnerability, which was classified as critical, has been found in strongSwan up to 5.9.3 (Network Encryption Software). Affected by

Common Vulnerabilities and Exposures

strongSwan up to 5.9.3 gmp Plugin integer overflow

A vulnerability, which was classified as critical, was found in strongSwan up to 5.9.3 (Network Encryption Software). This affects some

Common Vulnerabilities and Exposures

Devolutions Remote Desktop Manager prior 2021.2.16 permission

A vulnerability has been found in Devolutions Remote Desktop Manager and classified as critical. This vulnerability affects an unknown function.

Common Vulnerabilities and Exposures

OWASP Java HTML Sanitizer prior 20211018.1 Element access control

A vulnerability was found in OWASP Java HTML Sanitizer (Programming Language Software) and classified as critical. This issue affects an

Common Vulnerabilities and Exposures

Customer Service Software & Support Ticket System Plugin Form cross site scripting

A vulnerability has been found in Customer Service Software & Support Ticket System Plugin up to 5.10.3 on WordPress (Ticket

Common Vulnerabilities and Exposures

One User Avatar Plugin up to 2.3.6 on WordPress Shortcode cross site scripting

A vulnerability was found in One User Avatar Plugin up to 2.3.6 on WordPress (WordPress Plugin) and classified as problematic.

Common Vulnerabilities and Exposures

One User Avatar Plugin up to 2.3.6 on WordPress cross-site request forgery

A vulnerability was found in One User Avatar Plugin up to 2.3.6 on WordPress (WordPress Plugin). It has been classified