Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
38,884 results · page 338 of 778
Apr 29, 2024O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.CVE-2024-34048 · Other software · o-ran-sc · reported by MITRECritical 9.8
O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.
- Product
- ric-plt-e2mgr
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgerrit.o-ran-sc.orgjira.o-ran-sc.org
Apr 29, 2024emdns_resolve_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read.CVE-2023-50434 · Other software · emdns · reported by MITRECritical 9.8
emdns_resolve_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system libraries, compiler, and processor architecture. Code before be565c3 is unaffected.
- Product
- emdns.c
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpapers.mathyvanhoef.compapers.mathyvanhoef.com
Apr 29, 2024Directory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via the include/model/fiCVE-2024-33350 · Other software · taocms · reported by MITRECritical 9.8
Directory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via the include/model/file.php component.
- Product
- taocms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 29, 2024Insecure Permissions vulnerability in Guangzhou Yingshi Electronic Technology Co.CVE-2024-33435 · Other software · guangzhou_yingshi_electronic_technology · reported by MITRECritical 9.8
Insecure Permissions vulnerability in Guangzhou Yingshi Electronic Technology Co. Ncast Yingshi high-definition intelligent recording and playback system 2007-2017 allows a remote attacker to execute arbitrary code via the /manage/IPSetup.php backend function
- Product
- ncast_yingshi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 29, 2024SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL commands via the PreorderModelCVE-2024-33276 · Websites & servers · prestashop · reported by MITRECritical 9.8
SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL commands via the PreorderModel::getIdProductAttributesByIdAttributes() method.
- Product
- prestashop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.friendsofpresta.orgsecurity.friendsofpresta.org
Apr 29, 2024SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method.CVE-2024-33269 · Other software · communitydeveloper · reported by MITRECritical 9.8
SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method.
- Product
- prestaddons_flashsales
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.friendsofpresta.orgsecurity.friendsofpresta.org
Apr 29, 2024SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::addGiftToCart method.CVE-2024-33268 · Websites & servers · prestashopmodules · reported by MITRECritical 9.8
SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::addGiftToCart method.
- Product
- mdgiftproduct
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.friendsofpresta.orgsecurity.friendsofpresta.org
Apr 29, 2024SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via the DeliveryorderautoupCVE-2024-33266 · Other software · helloshop · reported by MITRECritical 9.8
SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via the DeliveryorderautoupdateOrdersModuleFrontController::initContent function.
- Product
- deliveryorderautoupdate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.friendsofpresta.orgsecurity.friendsofpresta.org
Apr 29, 2024An issue in Ecommerce-CodeIgniter-Bootstrap commit v.CVE-2024-31823 · Websites & servers · Ecommerce-codeigniter-bootstrap Project · reported by MITRECritical 9.8
An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component.
- Product
- Ecommerce-codeigniter-bootstrap
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Apr 29, 2024An issue in Ecommerce-CodeIgniter-Bootstrap commit v.CVE-2024-31822 · Websites & servers · ecommerce_codeigniter_bootstrap_project · reported by MITRECritical 9.8
An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component.
- Product
- ecommerce_codeigniter_bootstrap
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Apr 29, 2024An issue in Ecommerce-CodeIgniter-Bootstrap commit v.CVE-2024-31820 · Websites & servers · ecommerce_codeigniter_bootstrap_project · reported by MITRECritical 9.8
An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component.
- Product
- ecommerce_codeigniter_bootstrap
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Apr 29, 2024An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of user-supplied input.CVE-2024-31705 · Other software · glpi-project · reported by MITRECritical 9.8
An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of user-supplied input.
- Product
- glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comseclists.org
Apr 29, 2024An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the url parameteCVE-2024-33449 · Other software · pdfmyurl · reported by MITRECritical 9.8
An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the url parameter
- Product
- pdfmyurl
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgrumpz.netpdfmyurl.com
Apr 29, 2024An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPluginsCVE-2024-33445 · Other software · hisiphp · reported by MITRECritical 9.8
An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component.
- Product
- hisiphp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Apr 29, 2024SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component.CVE-2024-33444 · Other software · onethink · reported by MITRECritical 9.8
SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component.
- Product
- onethink
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Apr 29, 2024An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file (via a manipulated ACVE-2024-32491 · Other software · znuny · reported by MITRECritical 9.8
An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file (via a manipulated AJAX Request) to an arbitrary writable location by traversing paths. Arbitrary code can be executed if this location is publicly available through the web server.
- Product
- znuny
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 29, 2024Critical unrestricted file upload vulnerability in HubBank affecting version 1.0.2.CVE-2024-4306 · Other software · Ofofonobs · reported by cve-coordination@incibe.esCritical 9.9
Critical unrestricted file upload vulnerability in HubBank affecting version 1.0.2. This vulnerability allows a registered user to upload malicious PHP files via upload document fields, resulting in webshell execution.
- Product
- HubBank
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 29, 2024Incorrect Permission Assignment for Critical Resource vulnerability in Havelsan Inc.CVE-2024-3375 · Other software · Havelsan Inc. · reported by iletisim@usom.gov.trCritical 9.4
Incorrect Permission Assignment for Critical Resource vulnerability in Havelsan Inc. Dialogue allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Dialogue: from v1.83 before v1.83.1 or v1.84.
- Product
- Dialogue
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Apr 29, 2024OrderConvo: Missing AuthorizationCVE-2024-33566 · WordPress plugins & themes · reported by PatchstackCritical 10
Missing Authorization vulnerability in N-Media OrderConvo allows OS Command Injection.This issue affects OrderConvo: from n/a through 12.4.
- Product
- OrderConvo
- Affected
- up to 12.4
- What to do
- Affects up to 12.4. Update OrderConvo to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Apr 29, 2024XStore Core: Deserialization of Untrusted DataCVE-2024-33553 · WordPress plugins & themes · reported by PatchstackCritical 9
Deserialization of Untrusted Data vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.
- Product
- XStore Core
- Affected
- up to 5.3.5
- What to do
- Affects up to 5.3.5. Update XStore Core to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Apr 29, 2024A vulnerability, which was classified as critical, has been found in MailCleaner up to 2023.03.14.CVE-2024-3191 · Other software · mailcleaner · reported by VulDBCritical 9.8
A vulnerability, which was classified as critical, has been found in MailCleaner up to 2023.03.14. This issue affects some unknown processing of the component Email Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-262307.
- Product
- mailcleaner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 29, 2024WZone: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2024-33546 · WordPress plugins & themes · reported by PatchstackCritical 9.6
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10.
- Product
- WZone
- Affected
- up to 14.0.10
- What to do
- Affects up to 14.0.10. Update WZone to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Apr 29, 2024WZone: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2024-33544 · WordPress plugins & themes · reported by PatchstackCritical 9.3
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10.
- Product
- WZone
- Affected
- up to 14.0.10
- What to do
- Affects up to 14.0.10. Update WZone to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Apr 29, 2024XStore: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2024-33559 · WordPress plugins & themes · reported by PatchstackCritical 9.3
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore allows SQL Injection.This issue affects XStore: from n/a through 9.3.5.
- Product
- XStore
- Affected
- up to 9.3.5
- What to do
- Affects up to 9.3.5. Update XStore to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Apr 29, 2024XStore Core: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2024-33551 · WordPress plugins & themes · reported by PatchstackCritical 9.3
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore Core allows SQL Injection.This issue affects XStore Core: from n/a through 5.3.5.
- Product
- XStore Core
- Affected
- up to 5.3.5
- What to do
- Affects up to 5.3.5. Update XStore Core to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Apr 29, 2024E-WEBInformationCo.CVE-2024-4300 · Other software · E-WEBInformationCo. · reported by twcert@cert.org.twCritical 9.8
E-WEBInformationCo. FS-EZViewer(Web) exposes sensitive information in the service. A remote attacker can obtain the database configuration file path through the webpage source code without login. Accessing this path allows attacker to obtain the database credential with the highest privilege and database host IP address. With this information, attackers can connect to the database and perform actions such as adding, modifying, or deleting database contents.
- Product
- FS-EZViewer(Web)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Apr 29, 2024In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, ifCVE-2024-1874 · Websites & servers · PHP Group · reported by security@php.netCritical 9.4
In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.
- Product
- PHP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comopenwall.com
Apr 28, 2024In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free There are two .exit_cmd_priv implementations.CVE-2022-48666 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67Critical 9.8
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free There are two .exit_cmd_priv implementations. Both implementations use resources associated with the SCSI host. Make sure that these resources are still available when .exit_cmd_priv is called by waiting inside scsi_remove_host() until the tag set has been freed. This commit fixes the following use-after-free: ================================================================== BUG: KASAN: use-after-free in srp_exit_cmd_priv+0x27/0xd0 [ib_srp] Read of size 8 at addr ffff888100337000 by task multipathd/16727 Call Trace: <TASK> dump_stack_lvl+0x34/0x44 print_report.cold+0x5e/0x5db kasan_report+0xab/0x120 srp_exit_cmd_priv+0x27/0xd0 [ib_srp] scsi_mq_exit_request+0x4d/0x70 blk_mq_free_rqs+0x143/0x410 __blk_mq_free_map_and_rqs+0x6e/0x100 blk_mq_free_tag_set+0x2b/0x160 scsi_host_dev_release+0xf3/0x1a0 device_release+0x54/0xe0 kobject_put+0xa5/0x120 device_release+0x54/0xe0 kobject_put+0xa5/0x120 scsi_device_dev_release_usercontext+0x4c1/0x4e0 execute_in_process_context+0x23/0x90 device_release+0x54/0xe0 kobject_put+0xa5/0x120 scsi_disk_release+0x3f/0x50 device_releas
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Apr 27, 2024Timetable and Event Schedule by MotoPress: SQL InjectionCVE-2024-3342 · WordPress plugins & themes · reported by WordfenceCritical 9.9
The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL Injection via the 'events' attribute of the 'mp-timetable' shortcode in all versions up to, and including, 2.4.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Timetable and Event Schedule by MotoPress
- Affected
- up to 2.4.11
- What to do
- Affects up to 2.4.11. Update Timetable and Event Schedule by MotoPress to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Apr 26, 2024An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests.CVE-2024-30804 · Network & remote access · asus · reported by MITRECritical 9.8
An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests.
- Product
- fan_xpert
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2024SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commanCVE-2024-28322 · Other software · puneethreddyhc · reported by MITRECritical 9.8
SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the event_id parameter in a crafted POST request.
- Product
- event_management
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.compacketstormsecurity.com
Apr 26, 2024Danswer is the AI Assistant connected to company's docs, apps, and people.CVE-2024-32881 · Other software · danswer-ai · reported by GitHubCritical 9.8
Danswer is the AI Assistant connected to company's docs, apps, and people. Danswer is vulnerable to unauthorized access to GET/SET of Slack Bot Tokens. Anyone with network access can steal slack bot tokens and set them. This implies full compromise of the customer's slack bot, leading to internal Slack access. This issue was patched in version 3.63.
- Product
- danswer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2024An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v.CVE-2024-31601 · Other software · panabit · reported by MITRECritical 9.8
An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows attackers to execute arbitrary code via the exportpdf.php component.
- Product
- panalog
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2024Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords.CVE-2024-25343 · Network & remote access · tenda · reported by MITRECritical 9.1
Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords.
- Product
- n300
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2024D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers to execute arbitrary comCVE-2024-33344 · Network & remote access · d-link · reported by MITRECritical 9.8
D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers to execute arbitrary commands via shell.
- Product
- dir-822
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddlink.com.cngithub.com
Apr 26, 2024pyload is an open-source Download Manager written in pure Python.CVE-2024-32880 · Other software · pyload · reported by GitHubCritical 9.1
pyload is an open-source Download Manager written in pure Python. An authenticated user can change the download folder and upload a crafted template to the specified folder lead to remote code execution. There is no fix available at the time of publication.
- Product
- pyload
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2024An OS command injection vulnerability has been reported to affect several QNAP operating system versions.CVE-2024-32766 · Network & remote access · QNAP Systems Inc. · reported by security@qnapsecurity.com.twCritical 10
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.3.2578 build 20231110 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later
- Product
- QTS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2024A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link.CVE-2024-32764 · Network & remote access · QNAP Systems Inc. · reported by security@qnapsecurity.com.twCritical 9.9
A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability could allow users with the privilege level of some functionality via a network. We have already fixed the vulnerability in the following version: myQNAPcloud Link 2.4.51 and later
- Product
- myQNAPcloud Link
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2024An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on.CVE-2023-47222 · Network & remote access · QNAP Systems Inc. · reported by security@qnapsecurity.com.twCritical 9.6
An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.5 ( 2024/01/22 ) and later
- Product
- Media Streaming add-on
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2024Eclipse Target Management: Terminal and Remote System Explorer (RSE) version <= 4.5.400 has a remote code execution vulnerability that does not require authentiCVE-2024-0740 · Other software · Eclipse Foundation · reported by emo@eclipse.orgCritical 9.8
Eclipse Target Management: Terminal and Remote System Explorer (RSE) version <= 4.5.400 has a remote code execution vulnerability that does not require authentication. The fixed version is included in Eclipse IDE 2024-03
- Product
- Eclipse Target Management
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.eclipse.orggitlab.eclipse.org
Apr 26, 2024Product Addons & Fields for WooCommerce: Arbitrary file uploadsCVE-2024-3962 · WordPress plugins & themes · reported by WordfenceCritical 9.8
The Product Addons & Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ppom_upload_file function in all versions up to, and including, 32.0.18. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Successful exploitation requires the PPOM Pro plugin to be installed along with a WooCommerce product that contains a file upload field to retrieve the correct nonce.
- Product
- Product Addons & Fields for WooCommerce
- Affected
- up to 32.0.18
- What to do
- Affects up to 32.0.18. Update Product Addons & Fields for WooCommerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgthemeisle.com
Apr 26, 2024Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability via the hprinter paraCVE-2024-22633 · Other software · setor_informatica_sistema_inteligente_para_laboritorios_\/sil\/ · reported by MITRECritical 9.8
Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability via the hprinter parameter. This vulnerability is triggered via a crafted POST request.
- Product
- setor_informatica_sistema_inteligente_para_laboritorios_\/sil\/
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtomiodarim.iotomiodarim.io
Apr 26, 2024Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability via the hmsg parameteCVE-2024-22632 · Other software · setor · reported by MITRECritical 9.8
Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability via the hmsg parameter. This vulnerability is triggered via a crafted POST request.
- Product
- sil
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtomiodarim.iotomiodarim.io
Apr 25, 2024An issue was discovered in Zammad before 6.3.0.CVE-2024-33668 · Other software · zammad · reported by MITRECritical 9.1
An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to.
- Product
- zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 25, 2024Portainer before 2.20.0 allows redirects when the target is not index.yaml.CVE-2024-33661 · Other software · portainer · reported by MITRECritical 9.1
Portainer before 2.20.0 allows redirects when the target is not index.yaml.
- Product
- portainer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 25, 2024changedetection.io is an open source web page change detection, website watcher, restock monitor and notification service.CVE-2024-32651 · Other software · dgtlmoon · reported by GitHubCritical 10
changedetection.io is an open source web page change detection, website watcher, restock monitor and notification service. There is a Server Side Template Injection (SSTI) in Jinja2 that allows Remote Command Execution on the server host. Attackers can run any system command without any restriction and they could use a reverse shell. The impact is critical as the attacker can completely takeover the server machine. This can be reduced if changedetection is behind a login page, but this isn't required by the application (not by default and not enforced).
- Product
- changedetection.io
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.hacktivesecurity.comgithub.com
Apr 25, 2024Unauthenticated file upload allows remote code execution.CVE-2024-0916 · Other software · Webkul Software · reported by 41c37e40-543d-43a2-b660-2fee83ea851aCritical 10
Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community: from 1.0.0 through 1.1.3.
- Product
- UvDesk Community
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.compentraze.com
Apr 25, 2024Greenlight is an end-user interface for BigBlueButton servers.CVE-2022-36029 · Other software · bigbluebutton · reported by GitHubCritical 9.1
Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue.
- Product
- greenlight
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 25, 2024Greenlight is an end-user interface for BigBlueButton servers.CVE-2022-36028 · Other software · bigbluebutton · reported by GitHubCritical 9.1
Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue.
- Product
- greenlight
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 25, 2024ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.CVE-2024-31615 · Other software · thinkcmf · reported by MITRECritical 9.8
ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.
- Product
- thinkcmf
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.