All Posts by: Virtual Patching

Rocket.Chat up to 3.8 Link Preview Renderer cross site scripting

A vulnerability classified as problematic has been found in Rocket.Chat up to 3.8 (Chat Software). This affects an unknown code

Common Vulnerabilities and Exposures

Apache Superset up to 1.3.0 HTTP Request sql injection

A vulnerability classified as critical was found in Apache Superset up to 1.3.0. This vulnerability affects an unknown code block

Common Vulnerabilities and Exposures

bluemonday sanitizer up to 0.0.8/1.0.16 on Go/Python Policy access control

A vulnerability, which was classified as critical, has been found in bluemonday sanitizer up to 0.0.8/1.0.16 on Go/Python. This issue

Common Vulnerabilities and Exposures

Scroll Baner Plugin up to 1.0 on WordPress cross-site request forgery

A vulnerability, which was classified as problematic, was found in Scroll Baner Plugin up to 1.0 on WordPress (WordPress Plugin).

Common Vulnerabilities and Exposures

Find My Blocks Plugin up to 3.3.x on WordPress REST API access control

A vulnerability has been found in Find My Blocks Plugin up to 3.3.x on WordPress (WordPress Plugin) and classified as

Common Vulnerabilities and Exposures

PDF Light Viewer Plugin up to 1.4.11 on WordPress Ghostscript command injection

A vulnerability was found in PDF Light Viewer Plugin up to 1.4.11 on WordPress (WordPress Plugin) and classified as critical.

Common Vulnerabilities and Exposures

MainWP Child Reports Plugin up to 2.0.7 on WordPress Admin Dashboard order sql injection

A vulnerability was found in MainWP Child Reports Plugin up to 2.0.7 on WordPress (WordPress Plugin). It has been classified

Common Vulnerabilities and Exposures

Audio Player Plugin up to 2.1.2 on WordPress Shortcode cross site scripting

A vulnerability was found in Audio Player Plugin up to 2.1.2 on WordPress (WordPress Plugin). It has been declared as

Common Vulnerabilities and Exposures

Easy Twitter Feed Plugin up to 1.1 on WordPress Shortcode cross site scripting

A vulnerability was found in Easy Twitter Feed Plugin up to 1.1 on WordPress (Social Network Software). It has been

Common Vulnerabilities and Exposures

Best Video Gallery Plugin up to 1.2 on WordPress Shortcode cross site scripting

A vulnerability classified as problematic has been found in Best Video Gallery Plugin up to 1.2 on WordPress (Photo Gallery

Common Vulnerabilities and Exposures

Radio Player Plugin up to 2.1.0 on WordPress Shortcode cross site scripting

A vulnerability classified as problematic was found in Radio Player Plugin up to 2.1.0 on WordPress (WordPress Plugin). Affected by

Common Vulnerabilities and Exposures

Sociable Plugin up to 4.3.4.1 on WordPress cross site scripting

A vulnerability, which was classified as problematic, has been found in Sociable Plugin up to 4.3.4.1 on WordPress (WordPress Plugin).

Common Vulnerabilities and Exposures

GamePress Plugin up to 1.1.0 on WordPress Game Option Page op_edit cross site scripting

A vulnerability, which was classified as problematic, was found in GamePress Plugin up to 1.1.0 on WordPress (WordPress Plugin). This

Common Vulnerabilities and Exposures

Fatek Automation WinProladder up to 3.30 Project File use after free

A vulnerability has been found in Fatek Automation WinProladder up to 3.30 (Automation Software) and classified as critical. Affected by

Common Vulnerabilities and Exposures

Best Practical Request Tracker up to 4.2.16/4.4.4/5.0.1 Auth.pm timing discrepancy

A vulnerability was found in Best Practical Request Tracker up to 4.2.16/4.4.4/5.0.1 (Ticket Tracking Software). It has been declared as

Common Vulnerabilities and Exposures

OTRS up to 8.0.16 Ticket privileges assignment

A vulnerability was found in OTRS up to 8.0.16 (Service Management Software). It has been rated as critical. Affected by

Common Vulnerabilities and Exposures

Google Go up to 1.16.8/1.17.1 WASM module buffer overflow

A vulnerability classified as critical has been found in Google Go up to 1.16.8/1.17.1 (Programming Language Software). This affects an

Common Vulnerabilities and Exposures

myfactory.FMS prior 7.1-912 Parameter UID cross site scripting

A vulnerability classified as problematic was found in myfactory.FMS. This vulnerability affects an unknown functionality of the component Parameter Handler.

Common Vulnerabilities and Exposures

myfactory.FMS prior 7.1-912 Parameter Error cross site scripting

A vulnerability, which was classified as problematic, has been found in myfactory.FMS. This issue affects some unknown functionality of the

Common Vulnerabilities and Exposures

Squid Web Proxy up to 5.1.x certificate validation [CVE-2021-41611]

A vulnerability, which was classified as critical, was found in Squid Web Proxy up to 5.1.x (Firewall Software). Affected is

Common Vulnerabilities and Exposures

Uffizio GPS Tracker Service Port 9000 access control [CVE-2020-17483]

A vulnerability classified as critical was found in Uffizio GPS Tracker (affected version unknown). Affected by this vulnerability is some

Common Vulnerabilities and Exposures

Uffizio GPS Tracker Web Server unrestricted upload [CVE-2020-17485]

A vulnerability, which was classified as critical, has been found in Uffizio GPS Tracker (affected version not known). Affected by

Common Vulnerabilities and Exposures

Uffizio GPS Tracker redirect [CVE-2020-17484]

A vulnerability, which was classified as critical, was found in Uffizio GPS Tracker (the affected version unknown). This affects an

Common Vulnerabilities and Exposures

Uffizio GPS Tracker Web Page Generation cross site scripting

A vulnerability has been found in Uffizio GPS Tracker (the affected version is unknown) and classified as problematic. This vulnerability