All Posts by: Virtual Patching

GPAC 1.0.1 MP4Box afra_box_read memory leak

A vulnerability was found in GPAC 1.0.1. It has been classified as problematic. This affects the function afra_box_read of the

Common Vulnerabilities and Exposures

GPAC 1.0.1 MP4 File hevc_parse_vps_extension stack-based overflow

A vulnerability was found in GPAC 1.0.1. It has been declared as critical. This vulnerability affects the function hevc_parse_vps_extension of

Common Vulnerabilities and Exposures

GPAC 1.0.1 MP4Box infe_box_read memory leak

A vulnerability was found in GPAC 1.0.1. It has been rated as problematic. This issue affects the function infe_box_read of

Common Vulnerabilities and Exposures

GPAC 1.0.1 MP4Box def_parent_box_new memory leak

A vulnerability classified as problematic has been found in GPAC 1.0.1. Affected is the function def_parent_box_new of the component MP4Box.

Common Vulnerabilities and Exposures

GPAC 1.0.1 MP4Box gf_isom_oinf_read_entry memory leak

A vulnerability classified as problematic was found in GPAC 1.0.1. Affected by this vulnerability is the function gf_isom_oinf_read_entry of the

Common Vulnerabilities and Exposures

body-parser-xml Object Prototype code injection [CVE-2021-3666]

A vulnerability, which was classified as critical, has been found in body-parser-xml (affected version not known). Affected by this issue

Common Vulnerabilities and Exposures

matrix-js-sdk up to 12.4.0 Verification Privilege Escalation

A vulnerability, which was classified as problematic, was found in matrix-js-sdk up to 12.4.0. This affects some unknown processing of

Common Vulnerabilities and Exposures

Simple Ecommerce Shopping Cart Plugin up to 2.2.5 on WordPress Downloadable Digital Product File unrestricted upload

A vulnerability classified as critical was found in Simple Ecommerce Shopping Cart Plugin up to 2.2.5 on WordPress (E-Commerce Management

Common Vulnerabilities and Exposures

PHPGurukul Apartment Visitors Management System 1.0 sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects

Common Vulnerabilities and Exposures

KiteCMS 1.1 /admin/upload/uploadfile unrestricted upload

A vulnerability, which was classified as critical, was found in KiteCMS 1.1. Affected is an unknown part of the file

Common Vulnerabilities and Exposures

Email Artillery Plugin up to 4.1 on WordPress Import Emails unrestricted upload

A vulnerability has been found in Email Artillery Plugin up to 4.1 on WordPress (WordPress Plugin) and classified as critical.

Common Vulnerabilities and Exposures

AJAX action of the Custom Post View Generator Plugin Custom Post View Generato create_post_page cross site scripting

A vulnerability was found in AJAX action of the Custom Post View Generator Plugin up to 0.4.6 on WordPress (WordPress

Common Vulnerabilities and Exposures

WP Simple Booking Calendar Plugin up to 2.0.5 on WordPress Search Calendar orderby sql injection

A vulnerability was found in WP Simple Booking Calendar Plugin up to 2.0.5 on WordPress (Calendar Software). It has been

Common Vulnerabilities and Exposures

StopBadBots Plugin up to 6.59 on WordPress Admin Dashboard orderby sql injection

A vulnerability was found in StopBadBots Plugin up to 6.59 on WordPress (WordPress Plugin). It has been declared as critical.

Common Vulnerabilities and Exposures

Paid Member Subscriptions Plugin up to 2.4.1 on WordPress Memebers Page/Payments Page orderby cross site scripting

A vulnerability was found in Paid Member Subscriptions Plugin up to 2.4.1 on WordPress (WordPress Plugin). It has been rated

Common Vulnerabilities and Exposures

Fileviewer Plugin up to 2.2 on WordPress cross-site request forgery

A vulnerability classified as problematic has been found in Fileviewer Plugin up to 2.2 on WordPress (WordPress Plugin). Affected is

Common Vulnerabilities and Exposures

Smash Balloon Social Post Feed Plugin up to 2.19.1 on WordPress POST Parameter feed_locator feedID cross site scripting

A vulnerability classified as problematic was found in Smash Balloon Social Post Feed Plugin up to 2.19.1 on WordPress (WordPress

Common Vulnerabilities and Exposures

MF Gig Calendar Plugin up to 1.1 on WordPress Edit id cross site scripting

A vulnerability, which was classified as problematic, has been found in MF Gig Calendar Plugin up to 1.1 on WordPress

Common Vulnerabilities and Exposures

Daily Prayer Time Plugin prior 2021.08.10 on WordPress Setting cross site scripting

A vulnerability, which was classified as problematic, was found in Daily Prayer Time Plugin on WordPress (WordPress Plugin). This affects

Common Vulnerabilities and Exposures

Software License Manager Plugin up to 4.4.7 on WordPress Admin Dashboard edit_record cross site scripting

A vulnerability has been found in Software License Manager Plugin up to 4.4.7 on WordPress (WordPress Plugin) and classified as

Common Vulnerabilities and Exposures

Book Appointment Online Plugin up to 1.38 on WordPress Service Price cross site scripting

A vulnerability was found in Book Appointment Online Plugin up to 1.38 on WordPress (Appointment Software) and classified as problematic.

Common Vulnerabilities and Exposures

Per Page Add to Head Plugin up to 1.4.4 on WordPress cross site scripting

A vulnerability was found in Per Page Add to Head Plugin up to 1.4.4 on WordPress (WordPress Plugin). It has

Common Vulnerabilities and Exposures

WP Courses LMS Plugin up to 2.0.43 on WordPress cross site scripting

A vulnerability was found in WP Courses LMS Plugin up to 2.0.43 on WordPress (WordPress Plugin). It has been declared

Common Vulnerabilities and Exposures

Advanced Ticket System Plugin up to 1.0.63 on WordPress Form cross site scripting

A vulnerability was found in Advanced Ticket System Plugin and Elite Support Helpdesk Plugin up to 1.0.63 on WordPress (Ticket