Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
38,964 results · page 364 of 780
Dec 29, 2023Nexter Extension: Improper Control of Generation of Code ('Code Injection')CVE-2023-45751 · WordPress plugins & themes · reported by PatchstackCritical 9.1
Improper Control of Generation of Code ('Code Injection') vulnerability in POSIMYTH Nexter Extension.This issue affects Nexter Extension: from n/a through 2.0.3.
- Product
- Nexter Extension
- Affected
- up to 2.0.3
- What to do
- Affects up to 2.0.3. Update Nexter Extension to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Dec 29, 2023Kanban Boards for: Improper Control of Generation of Code ('Code Injection')CVE-2023-40606 · WordPress plugins & themes · reported by PatchstackCritical 9.1
Improper Control of Generation of Code ('Code Injection') vulnerability in Kanban for WordPress Kanban Boards for WordPress.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21.
- Product
- Kanban Boards for
- Affected
- up to 2.5.21
- What to do
- Affects up to 2.5.21. Update Kanban Boards for to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Dec 29, 2023Rename Media Files: Improper Control of Generation of Code ('Code Injection')CVE-2023-32095 · WordPress plugins & themes · reported by PatchstackCritical 9.9
Improper Control of Generation of Code ('Code Injection') vulnerability in Milan Dinić Rename Media Files.This issue affects Rename Media Files: from n/a through 1.0.1.
- Product
- Rename Media Files
- Affected
- up to 1.0.1
- What to do
- Affects up to 1.0.1. Update Rename Media Files to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Dec 29, 2023RSVPMaker: Improper Control of Generation of Code ('Code Injection')CVE-2023-25054 · WordPress plugins & themes · reported by PatchstackCritical 10
Improper Control of Generation of Code ('Code Injection') vulnerability in David F. Carr RSVPMaker.This issue affects RSVPMaker: from n/a through 10.6.6.
- Product
- RSVPMaker
- Affected
- up to 10.6.6
- What to do
- Affects up to 10.6.6. Update RSVPMaker to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Dec 29, 2023SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity eCVE-2023-23634 · Other software · Documize · reported by MITRECritical 9.8
SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint.
- Product
- Documize
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordherolab.usd.deherolab.usd.de
Dec 28, 2023XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.CVE-2023-52174 · Other software · Xnview · reported by MITRECritical 9.8
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.
- Product
- Xnview Classic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comnewsgroup.xnview.com
Dec 28, 2023XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.CVE-2023-52173 · Other software · Xnview · reported by MITRECritical 9.8
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.
- Product
- Xnview Classic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comnewsgroup.xnview.com
Dec 28, 2023 Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.CVE-2023-51434 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Critical 9.3
Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.
- Product
- Magic UI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhihonor.comhihonor.com
Dec 28, 2023ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privileges and execute arbCVE-2023-50104 · Other software · Zzcms · reported by MITRECritical 9.8
ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privileges and execute arbitrary code.
- Product
- Zzcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2023JS Help Desk – Best Help Desk & Support: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2023-50839 · WordPress plugins & themes · reported by PatchstackCritical 9.3
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1.
- Product
- JS Help Desk – Best Help Desk & Support
- Affected
- up to 2.8.1
- What to do
- Affects up to 2.8.1. Update JS Help Desk – Best Help Desk & Support to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Dec 28, 2023A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service.CVE-2023-7163 · Network & remote access · D-Link · reported by vulnreport@tenable.comCritical 10
A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the execution of tasks on other probes.
- Product
- D-View 8
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtenable.comtenable.com
Dec 28, 2023Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software ECOP allows Command Line Execution throughCVE-2023-4671 · Other software · Talent Software · reported by iletisim@usom.gov.trCritical 9.8
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection. This issue affects ECOP: before 32255.
- Product
- ECOP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Dec 27, 2023Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().CVE-2023-6879 · Other software · libaom · reported by cve-coordination@google.comCritical 9
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().
- Product
- libaom
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaomedia.googlesource.comcrbug.com
Dec 27, 2023An issue in Indi Browser (aka kvbrowser) v.12.11.23 allows an attacker to bypass intended access restrictions via interaction with the com.example.gurry.kvbrowsCVE-2023-49001 · Other software · Indibrowser · reported by MITRECritical 9.8
An issue in Indi Browser (aka kvbrowser) v.12.11.23 allows an attacker to bypass intended access restrictions via interaction with the com.example.gurry.kvbrowswer.webview component.
- Product
- Indi Browser
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2023An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via interaction with the com.artis.browser.InCVE-2023-49000 · Other software · Artistscope · reported by MITRECritical 9.8
An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via interaction with the com.artis.browser.IntentReceiverActivity component. NOTE: this is disputed by the vendor, who indicates that ArtisBrowser 34 does not support CSS3.
- Product
- Artisbrowser
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2023hyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method.CVE-2023-51084 · Other software · Hyavijava · reported by MITRECritical 9.8
hyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method.
- Product
- Hyavijava
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2023The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to CVE-2023-47883 · Other software · Vladymix · reported by MITRECritical 9.8
The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity.
- Product
- TV Browser
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2023The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView.CVE-2023-43955 · Other software · Fedirtsapana · reported by MITRECritical 9.8
The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData.
- Product
- TV BRO
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2023An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote attacker to execute arbitrary JavaScript coCVE-2023-43481 · Other software · sshenzhen_tcl_new_technology_co_limited · reported by MITRECritical 9.8
An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote attacker to execute arbitrary JavaScript code via the com.tcl.browser.portal.browse.activity.BrowsePageActivity component.
- Product
- com.tcl.browser
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2023Deepin-Compressor is the default archive manager of Deepin Linux OS.CVE-2023-50255 · Computers, phones & browsers · linuxdeepin · reported by GitHubCritical 9.3
Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to update to version 5.12.21 which addresses the issue. There are no known workarounds for this vulnerability.
- Product
- developer-center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2023Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in İzmir Katip Çelebi University University Information Management CVE-2023-6190 · Other software · İzmir Katip Çelebi University · reported by iletisim@usom.gov.trCritical 9.8
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in İzmir Katip Çelebi University University Information Management System allows Absolute Path Traversal. This issue affects University Information Management System: before 30.11.2023.
- Product
- University Information Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Dec 26, 2023Hotel Booking Lite: Does not validate file paths provided via user inputCVE-2023-5991 · WordPress plugins & themes · reported by WPScanCritical 9.8
The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server
- Product
- Hotel Booking Lite
- Fixed in
- 4.8.5
- What to do
- Update Hotel Booking Lite to 4.8.5 or newer.
Dec 26, 2023Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.CVE-2023-51102 · Network & remote access · Tenda · reported by MITRECritical 9.8
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.
- Product
- W9 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.CVE-2023-51101 · Network & remote access · Tenda · reported by MITRECritical 9.8
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.
- Product
- W9 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo .CVE-2023-51100 · Network & remote access · Tenda · reported by MITRECritical 9.8
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo .
- Product
- W9 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .CVE-2023-51099 · Network & remote access · Tenda · reported by MITRECritical 9.8
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .
- Product
- W9 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo .CVE-2023-51098 · Network & remote access · Tenda · reported by MITRECritical 9.8
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo .
- Product
- W9 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.CVE-2023-51097 · Network & remote access · Tenda · reported by MITRECritical 9.8
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.
- Product
- W9 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet.CVE-2023-51094 · Network & remote access · Tenda · reported by MITRECritical 9.8
Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet.
- Product
- M3 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo.CVE-2023-51093 · Network & remote access · Tenda · reported by MITRECritical 9.8
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo.
- Product
- M3 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.CVE-2023-51092 · Network & remote access · tenda · reported by MITRECritical 9.8
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.
- Product
- m3_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.CVE-2023-51091 · Network & remote access · Tenda · reported by MITRECritical 9.8
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.
- Product
- M3 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig.CVE-2023-51090 · Network & remote access · Tenda · reported by MITRECritical 9.8
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig.
- Product
- M3 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.CVE-2023-51095 · Network & remote access · Tenda · reported by MITRECritical 9.8
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.
- Product
- M3 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code CVE-2023-51467 · Websites & servers · Apache Software Foundation · reported by security@apache.orgCritical 9.8
The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code
- Product
- Apache OFBiz
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordissues.apache.orglists.apache.org
Dec 25, 2023The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address.CVE-2023-49954 · Other software · 3cx · reported by MITRECritical 9.8
The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address.
- Product
- 3cx
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcve-2023-49954.github.iocve-2023-49954.github.io
Dec 25, 2023There is broken access control during authentication in Jamf Pro Server before 10.46.1.CVE-2023-31224 · Other software · Jamf · reported by MITRECritical 9.8
There is broken access control during authentication in Jamf Pro Server before 10.46.1.
- Product
- Jamf
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlearn.jamf.comlearn.jamf.com
Dec 25, 2023An issue was discovered in RWS WorldServer before 11.7.3.CVE-2022-34268 · Other software · RWS · reported by MITRECritical 9.8
An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command execution on the host.
- Product
- Worldserver
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrws.comtriskelelabs.com
Dec 25, 2023An issue was discovered in RWS WorldServer before 11.7.3.CVE-2022-34267 · Other software · RWS · reported by MITRECritical 9.8
An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all authentication requirements. Arbitrary Java code can be uploaded and executed via a .jar archive to the ws-api/v2/customizations/api endpoint.
- Product
- Worldserver
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrws.comtriskelelabs.com
Dec 25, 2023One Identity Password Manager before 5.13.1 allows Kiosk Escape.CVE-2023-48654 · Other software · Oneidentity · reported by MITRECritical 9.8
One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login screen of a Windows client. It launches a Chromium based browser in Kiosk mode to provide the reset functionality. The escape sequence is: go to the Google ReCAPTCHA section, click on the Privacy link, observe that there is a new browser window, navigate to any website that offers file upload, navigate to cmd.exe from the file explorer window, and launch cmd.exe as NT AUTHORITY\SYSTEM.
- Product
- Password Manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsec-consult.comoneidentity.com
Dec 25, 2023In MicroHttpServer (aka Micro HTTP Server) through a8ab029, _ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a long URI.CVE-2023-51771 · Websites & servers · Starnight · reported by MITRECritical 9.8
In MicroHttpServer (aka Micro HTTP Server) through a8ab029, _ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a long URI.
- Product
- Micro Http Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 24, 2023A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024.CVE-2023-7095 · Other software · Totolink · reported by VulDBCritical 9.8
A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024. Affected by this issue is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-248942 is the identifier assigned to this vulnerability.
- Product
- A7100RU
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 24, 2023Use of a Third Party library produced a vulnerability in Barracuda Networks Inc.CVE-2023-7102 · Network & remote access · Barracuda Networks Inc. · reported by mandiant-cve@google.comCritical 9.8
Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic.
- Product
- Barracuda ESG Appliance
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 24, 2023An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2.CVE-2023-51714 · Other software · Debian · reported by MITRECritical 9.8
An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcodereview.qt-project.orgcodereview.qt-project.org
Dec 23, 2023csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.CVE-2023-51763 · Other software · Activeadmin · reported by MITRECritical 9.8
csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.
- Product
- Active Admin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 22, 2023Backup Migration: Path TraversalCVE-2023-6972 · WordPress plugins & themes · reported by WordfenceCritical 9.8
The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backups' and 'content-name', 'content-manifest', or 'content-bmitmp' and 'content-identy' HTTP headers. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible.
- Product
- Backup Migration
- Affected
- up to 1.3.9
- What to do
- Affects up to 1.3.9. Update Backup Migration to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Dec 22, 2023MindsDB is a SQL Server for artificial intelligence.CVE-2023-50731 · Other software · mindsdb · reported by GitHubCritical 9.1
MindsDB is a SQL Server for artificial intelligence. Prior to version 23.11.4.1, the `put` method in `mindsdb/mindsdb/api/http/namespaces/file.py` does not validate the user-controlled name value, which is used in a temporary file name, which is afterwards opened for writing on lines 122-125, which leads to path injection. Later in the method, the temporary directory is deleted on line 151, but since we can write outside of the directory using the path injection vulnerability, the potentially dangerous file is not deleted. Arbitrary file contents can be written due to `f.write(chunk)` on line 125. Mindsdb does check later on line 149 in the `save_file` method in `file-controller.py` which calls the `_handle_source` method in `file_handler.py` if a file is of one of the types `csv`, `json`, `parquet`, `xls`, or `xlsx`. However, since the check happens after the file has already been written, the files will still exist (and will not be removed due to the path injection described earlier), just the `_handle_source` method will return an error. The same user-controlled source source is used also in another path injection sink on line 138. This leads to another path injection, which all
- Product
- mindsdb
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 22, 2023TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.CVE-2023-51035 · Other software · Totolink · reported by MITRECritical 9.8
TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.
- Product
- Ex1200l Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record815yang.github.io815yang.github.io
Dec 22, 2023TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.CVE-2023-51034 · Other software · totolink · reported by MITRECritical 9.8
TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.
- Product
- ex1200l_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record815yang.github.io815yang.github.io
Dec 22, 2023TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface.CVE-2023-51033 · Other software · Totolink · reported by MITRECritical 9.8
TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface.
- Product
- Ex1200l Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record815yang.github.io815yang.github.io
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.