All Posts by: Virtual Patching

Better Find and Replace Plugin up to 1.2.8 on WordPress All Masking Rules Page cross site scripting

A vulnerability has been found in Better Find and Replace Plugin up to 1.2.8 on WordPress (WordPress Plugin) and classified

Common Vulnerabilities and Exposures

CM Tooltip Glossary Plugin up to 3.9.20 on WordPress Shortcode glossary_tooltip cross site scripting

A vulnerability was found in CM Tooltip Glossary Plugin up to 3.9.20 on WordPress (WordPress Plugin) and classified as problematic.

Common Vulnerabilities and Exposures

Modern Events Calendar Lite Plugin up to 5.22.1 on WordPress Attribute cross site scripting

A vulnerability was found in Modern Events Calendar Lite Plugin up to 5.22.1 on WordPress (Calendar Software). It has been

Common Vulnerabilities and Exposures

SourceCodester Lodging Reservation Management System 1 Login username/password sql injection

A vulnerability was found in SourceCodester Lodging Reservation Management System 1. It has been declared as critical. This vulnerability affects

Common Vulnerabilities and Exposures

i-Panel Administration System 2.0 cross site scripting [CVE-2021-41878]

A vulnerability was found in i-Panel Administration System 2.0. It has been rated as problematic. This issue affects an unknown

Common Vulnerabilities and Exposures

Cobbler up to 3.2.x Template injection

A vulnerability, which was classified as critical, has been found in Cobbler up to 3.2.x. Affected by this issue is

Common Vulnerabilities and Exposures

Operations up to 3.2.x upload_log_data Privilege Escalation

A vulnerability, which was classified as critical, was found in Operations up to 3.2.x. Upgrading to version 3.3.0 eliminates this

Common Vulnerabilities and Exposures

Cobbler up to 3.2.x Setting authorization

A vulnerability has been found in Cobbler up to 3.2.x and classified as critical. This vulnerability affects an unknown code

Common Vulnerabilities and Exposures

Polycom Poly VVX 400/Poly VVX 410 up to 5.3.1 POST Parameter access control

A vulnerability was found in Polycom Poly VVX 400 and Poly VVX 410 up to 5.3.1 and classified as critical.

Common Vulnerabilities and Exposures

Ballistix MOD Utility up to 2.0.2.5 Driver MODAPI.sys MmMapIoSpace access control

A vulnerability was found in Ballistix MOD Utility up to 2.0.2.5. It has been classified as critical. Affected is the

Common Vulnerabilities and Exposures

SuiteCRM up to 7.10.32/7.11.21 access control [CVE-2021-41869]

A vulnerability was found in SuiteCRM up to 7.10.32/7.11.21. It has been declared as critical. Affected by this vulnerability is

Common Vulnerabilities and Exposures

Google SLO Generator YAML File code injection [CVE-2021-22557]

A vulnerability was found in Google SLO Generator (affected version not known). It has been rated as critical. Affected by

Common Vulnerabilities and Exposures

PHP up to 7.3.30/7.4.23/8.0.10 on Windows ZipArchive::extractTo path traversal

A vulnerability was found in PHP up to 7.3.30/7.4.23/8.0.10 on Windows (Programming Language Software). It has been declared as critical.

Common Vulnerabilities and Exposures

PHP up to 7.3.28/7.4.20/8.0.7 PDO Driver Extension getAttribute/execute/fetch out-of-bounds read

A vulnerability was found in PHP up to 7.3.28/7.4.20/8.0.7 (Programming Language Software). It has been rated as problematic. This issue

Common Vulnerabilities and Exposures

PHP up to 7.3.28/7.4.20/8.0.7 URL Validation filter_var FILTER_VALIDATE_URL input validation

A vulnerability classified as critical has been found in PHP up to 7.3.28/7.4.20/8.0.7 (Programming Language Software). Affected is the function

Common Vulnerabilities and Exposures

Telegram App up to 7.5.0/7.8.0 on Android Image Self-Destruction information disclosure

A vulnerability classified as problematic was found in Telegram App up to 7.5.0/7.8.0 on Android (Android App Software). Affected by

Common Vulnerabilities and Exposures

Google Chrome prior 94.0.4606.71 Safe Browsing use after free

A vulnerability has been found in Google Chrome (Web Browser) and classified as critical. Affected by this vulnerability is an

Common Vulnerabilities and Exposures

Google Chrome prior 94.0.4606.71 V8 use after free

A vulnerability was found in Google Chrome (Web Browser) and classified as critical. Affected by this issue is an unknown

Common Vulnerabilities and Exposures

Google Chrome prior 94.0.4606.71 Core information disclosure

A vulnerability was found in Google Chrome (Web Browser). It has been classified as problematic. This affects an unknown code

Common Vulnerabilities and Exposures

Ecommerce-CodeIgniter-Bootstrap Parameter products.php search_title cross site scripting

A vulnerability was found in Ecommerce-CodeIgniter-Bootstrap (E-Commerce Management Software) (affected version unknown). It has been declared as problematic. Affected by

Common Vulnerabilities and Exposures

emlog 6.0.0 /admin/comment.php sql injection

A vulnerability was found in emlog 6.0.0. It has been rated as critical. Affected by this issue is an unknown

Common Vulnerabilities and Exposures

emlog 6.0.0 admin/plugin.php denial of service

A vulnerability classified as problematic has been found in emlog 6.0.0. This affects an unknown functionality of the file admin/plugin.php.

Common Vulnerabilities and Exposures

Detector up to 0.8.5 Parameter _contactform.inc.php cid cross site scripting

A vulnerability classified as problematic was found in Detector up to 0.8.5. This vulnerability affects some unknown functionality of the

Common Vulnerabilities and Exposures

bugs up to 1.8 Parameter install/index.php last_name cross site scripting

A vulnerability, which was classified as problematic, has been found in bugs up to 1.8. This issue affects an unknown