All Posts by: Virtual Patching

SuiteCRM up to 7.10.32/7.11.21 Import RefreshMapping importFile pathname traversal

A vulnerability, which was classified as problematic, has been found in SuiteCRM up to 7.10.32/7.11.21. Affected by this issue is

Common Vulnerabilities and Exposures

Bosch Rexroth IndraMotion MLC/Rexroth IndraLogic XLC Web Server information disclosure

A vulnerability, which was classified as problematic, was found in Bosch Rexroth IndraMotion MLC and Rexroth IndraLogic XLC (the affected

Common Vulnerabilities and Exposures

Redis up to 5.0.13/6.0.15/6.2.5 Lua Debugging out-of-bounds read

A vulnerability has been found in Redis up to 5.0.13/6.0.15/6.2.5 and classified as problematic. This vulnerability affects an unknown part

Common Vulnerabilities and Exposures

Redis up to 5.0.13/6.0.15/6.2.5 redis-cli/redis-sentinel Service calloc integer overflow

A vulnerability was found in Redis up to 5.0.13/6.0.15/6.2.5 and classified as critical. This issue affects the function calloc of

Common Vulnerabilities and Exposures

Stripe for WooCommerce Plugin up to 3.3.9 on WordPress Capability Check class-wc-stripe-admin-user-edit.php save authorization

A vulnerability classified as critical was found in Stripe for WooCommerce Plugin up to 3.3.9 on WordPress (E-Commerce Management Software).

Common Vulnerabilities and Exposures

Raymart DG hotel-mgmt-system Parameter process_update_profile.php cid sql injection

A vulnerability, which was classified as critical, has been found in Raymart DG hotel-mgmt-system (Hospitality Software) (unknown version). This issue

Common Vulnerabilities and Exposures

Xiuno BBS 4.0.4 routeuser.php information disclosure

A vulnerability, which was classified as problematic, was found in Xiuno BBS 4.0.4. Affected is an unknown part of the

Common Vulnerabilities and Exposures

HongCMS 3.0 edit path traversal

A vulnerability has been found in HongCMS 3.0 and classified as critical. Affected by this vulnerability is an unknown code

Common Vulnerabilities and Exposures

BIQS IT Biqs-drive up to 1.83 download/index.php file file inclusion

A vulnerability was found in BIQS IT Biqs-drive up to 1.83 and classified as problematic. Affected by this issue is

Common Vulnerabilities and Exposures

maccms 10 info.html cross-site request forgery

A vulnerability was found in maccms 10. It has been classified as problematic. This affects some unknown processing of the

Common Vulnerabilities and Exposures

OnionShare 2.3.0/2.3.1/2.3.2/2.3.3 Chat information disclosure

A vulnerability classified as problematic has been found in OnionShare 2.3.0/2.3.1/2.3.2/2.3.3. Affected is an unknown code block of the component

Common Vulnerabilities and Exposures

Adobe XMP Toolkit SDK up to 2020.1 CPP File heap-based overflow

A vulnerability classified as critical was found in Adobe XMP Toolkit SDK up to 2020.1. Affected by this vulnerability is

Common Vulnerabilities and Exposures

OnionShare 2.3.0/2.3.1/2.3.2/2.3.3 Receive unrestricted upload

A vulnerability, which was classified as critical, has been found in OnionShare 2.3.0/2.3.1/2.3.2/2.3.3. Affected by this issue is an unknown

Common Vulnerabilities and Exposures

Gila CMS 2.2.0 Picture Name resource injection

A vulnerability, which was classified as problematic, was found in Gila CMS 2.2.0 (Content Management System). This affects an unknown

Common Vulnerabilities and Exposures

Laravel Booking System Booking Core 2.0 Avatar Upload cross site scripting

A vulnerability has been found in Laravel Booking System Booking Core 2.0 and classified as problematic. This vulnerability affects some

Common Vulnerabilities and Exposures

Laravel Booking System Booking Core 2.0 Verification Page access control

A vulnerability was found in Laravel Booking System Booking Core 2.0 and classified as problematic. This issue affects an unknown

Common Vulnerabilities and Exposures

Laravel Booking System Booking Core 2.0 Password Change change-password user session

A vulnerability was found in Laravel Booking System Booking Core 2.0. It has been classified as critical. Affected is an

Common Vulnerabilities and Exposures

IceHrm 30.0.0 user session [CVE-2021-38823]

A vulnerability was found in IceHrm 30.0.0. It has been declared as critical. Affected by this vulnerability is an unknown

Common Vulnerabilities and Exposures

Calibre-Web up to 0.6.12 Metadata cross site scripting

A vulnerability was found in Calibre-Web up to 0.6.12. It has been rated as problematic. Affected by this issue is

Common Vulnerabilities and Exposures

IceHrm 30.0.0.OS File Upload cross site scripting

A vulnerability classified as problematic has been found in IceHrm 30.0.0.OS. This affects an unknown function of the component File

Common Vulnerabilities and Exposures

Meow Gallery Plugin up to 4.1.8 on WordPress Shortcode sql injection

A vulnerability classified as critical has been found in Meow Gallery Plugin up to 4.1.8 on WordPress (Photo Gallery Software).

Common Vulnerabilities and Exposures

User Registration Plugin up to 2.0.1 on WordPress user_registration_update_profile_details user_registration_profile_pic_url cross site scripting

A vulnerability classified as problematic was found in User Registration Plugin up to 2.0.1 on WordPress (WordPress Plugin). This vulnerability

Common Vulnerabilities and Exposures

Bitcoin Payment Gateway for WooCommerce Plugin up to 1.6.0 on WooCommerce All Masking Rules Page cross site scripting

A vulnerability, which was classified as problematic, has been found in Bitcoin Payment Gateway for WooCommerce Plugin up to 1.6.0

Common Vulnerabilities and Exposures

Appointment Hour Booking Plugin up to 1.3.15 on WordPress Calendar Form Settings cross site scripting

A vulnerability, which was classified as problematic, was found in Appointment Hour Booking Plugin up to 1.3.15 on WordPress (Appointment