All Posts by: Virtual Patching

PHP-Fusion 9.03.60 New Shout shoutbox_admin.php cross site scripting

A vulnerability, which was classified as problematic, has been found in PHP-Fusion 9.03.60 (Content Management System). Affected by this issue

Common Vulnerabilities and Exposures

Video Downloader for TikTok Plugin 1.3 on WordPress Parameter njt-tk-download-video pathname traversal

A vulnerability, which was classified as critical, was found in Video Downloader for TikTok Plugin 1.3 on WordPress (WordPress Plugin).

Common Vulnerabilities and Exposures

Creative Minds CM Download Manager Plugin 2.7.0 on WordPress deletescreenshot cross site scripting

A vulnerability has been found in Creative Minds CM Download Manager Plugin 2.7.0 on WordPress (WordPress Plugin) and classified as

Common Vulnerabilities and Exposures

Creative Minds CM Download Manager Plugin 2.7.0 on WordPress Parameter deletescreenshot fileName pathname traversal

A vulnerability was found in Creative Minds CM Download Manager Plugin 2.7.0 on WordPress (WordPress Plugin) and classified as critical.

Common Vulnerabilities and Exposures

WP Fluent Forms Plugin up to 3.6.66 on WordPress cross-site request forgery

A vulnerability was found in WP Fluent Forms Plugin up to 3.6.66 on WordPress (WordPress Plugin). It has been classified

Common Vulnerabilities and Exposures

WP Upload Restriction Plugin up to 2.2.3 on WordPress saveCustomType cross site scripting

A vulnerability was found in WP Upload Restriction Plugin up to 2.2.3 on WordPress (WordPress Plugin). It has been declared

Common Vulnerabilities and Exposures

WP Upload Restriction Plugin up to 2.2.3 on WordPress deleteCustomType access control

A vulnerability was found in WP Upload Restriction Plugin up to 2.2.3 on WordPress (WordPress Plugin). It has been rated

Common Vulnerabilities and Exposures

WP Upload Restriction Plugin up to 2.2.3 on WordPress Extension getSelectedMimeTypesByRole access control

A vulnerability classified as critical has been found in WP Upload Restriction Plugin up to 2.2.3 on WordPress (WordPress Plugin).

Common Vulnerabilities and Exposures

WP Smart Import Plugin 1.0.0 on WordPress file server-side request forgery

A vulnerability classified as critical was found in WP Smart Import Plugin 1.0.0 on WordPress (WordPress Plugin). This vulnerability affects

Common Vulnerabilities and Exposures

WP-DownloadManager Plugin 1.68.4 on WordPress download-add.php file_remote server-side request forgery

A vulnerability was found in WP-DownloadManager Plugin 1.68.4 on WordPress (WordPress Plugin). It has been classified as critical. Affected is

Common Vulnerabilities and Exposures

Email Template Designer WP HTML Mail up to 3.0.7 on WordPress cross-site request forgery

A vulnerability classified as problematic has been found in Email Template Designer WP HTML Mail up to 3.0.7 on WordPress

Common Vulnerabilities and Exposures

Currency Switcher up to 1.1.6 on WordPress cross-site request forgery

A vulnerability classified as problematic was found in Currency Switcher up to 1.1.6 on WordPress (WordPress Plugin). Affected by this

Common Vulnerabilities and Exposures

Elecom WRC-1167FS-W/WRC-1167FS-B/WRC-1167FSA information disclosure

A vulnerability, which was classified as problematic, has been found in Elecom WRC-1167FS-W, WRC-1167FS-B and WRC-1167FSA (affected version not known).

Common Vulnerabilities and Exposures

Elecom WRC-300FEBK os command injection [CVE-2021-20739]

A vulnerability, which was classified as critical, was found in Elecom WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK,

Common Vulnerabilities and Exposures

A-Stage SCT-40CM01SR/AT-40CM01SR Telnet access control [CVE-2021-20776]

A vulnerability has been found in A-Stage SCT-40CM01SR and AT-40CM01SR (the affected version is unknown) and classified as critical. This

Common Vulnerabilities and Exposures

GU App up to 5.0.2 on Android Custom URL Scheme improper authorization

A vulnerability was found in GU App up to 5.0.2 on Android (Android App Software) and classified as critical. This

Common Vulnerabilities and Exposures

PHPList 3.5.1 unrestricted upload [CVE-2020-22249]

A vulnerability has been found in PHPList 3.5.1 (Mailing List Software) and classified as critical. This vulnerability affects an unknown

Common Vulnerabilities and Exposures

Linux Kernel up to 5.12.13 kernel/module.c init_module signature verification

A vulnerability was found in Linux Kernel up to 5.12.13 (Operating System) and classified as problematic. This issue affects the

Common Vulnerabilities and Exposures

mootools incorrect regex [CVE-2021-32821]

A vulnerability was found in mootools (version unknown). It has been classified as critical. Affected is an unknown code block.

Common Vulnerabilities and Exposures

phpList 3.5.3 Manage Administrators Login Name cross site scripting

A vulnerability was found in phpList 3.5.3 (Mailing List Software). It has been declared as problematic. Affected by this vulnerability

Common Vulnerabilities and Exposures

Monstra CMS 3.0.4 Page Feature admin/index.php cross site scripting

A vulnerability was found in Monstra CMS 3.0.4 (Content Management System). It has been rated as problematic. Affected by this

Common Vulnerabilities and Exposures

Issabel PBX 4 Create New Rate index.php Name/Prefix cross site scripting

A vulnerability classified as problematic has been found in Issabel PBX 4 (Communications System). This affects an unknown functionality of

Common Vulnerabilities and Exposures

OpenEXR up to 3.0.4 ImfDeepScanLineInputFile out-of-bounds read

A vulnerability classified as problematic was found in OpenEXR up to 3.0.4. This vulnerability affects the function ImfDeepScanLineInputFile. Upgrading to

Common Vulnerabilities and Exposures

GitLab GraphQL access control [CVE-2021-22228]

A vulnerability, which was classified as critical, has been found in GitLab (Bug Tracking Software) (unknown version). This issue affects