Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
4,307 results · page 81 of 87
Jun 8, 2022A vulnerability, which was classified as critical, has been found in The Next Generation of Genealogy Sitebuilding up to 11.1.0.CVE-2017-20017 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, has been found in The Next Generation of Genealogy Sitebuilding up to 11.1.0. This issue affects some unknown processing of the file /timeline2.php. The manipulation of the argument primaryID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.1.1 is able to address this issue. It is recommended to upgrade the affected component.
- Product
- The Next Generation of Genealogy Sitebuilding
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 8, 2022A vulnerability has been found in SialWeb CMS and classified as problematic.CVE-2020-36544 · Other software · SialWeb · reported by VulDBLow 3.5
A vulnerability has been found in SialWeb CMS and classified as problematic. This vulnerability affects unknown code of the component Search Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
- Product
- CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 8, 2022A vulnerability, which was classified as critical, was found in SialWeb CMS.CVE-2020-36543 · Other software · SialWeb · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, was found in SialWeb CMS. This affects an unknown part of the file /about.php. The manipulation of the argument Id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
- Product
- CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 8, 2022A vulnerability was found in Sricam IP CCTV Camera and classified as critical.CVE-2019-25062 · Other software · Sricam · reported by VulDBMedium 5.3
A vulnerability was found in Sricam IP CCTV Camera and classified as critical. This issue affects some unknown processing of the component Device Viewer. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
- Product
- IP CCTV Camera
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuldb.comexploit-db.com
Jun 7, 2022A vulnerability classified as critical has been found in Demokratian.CVE-2020-36542 · Other software · unspecified · reported by VulDBHigh 7.3
A vulnerability classified as critical has been found in Demokratian. This affects an unknown part of the file install/install3.php. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
- Product
- Demokratian
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordalquimistadesistemas.combitbucket.org
Jun 7, 2022A vulnerability, which was classified as critical, was found in Neetai Tech.CVE-2020-36540 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, was found in Neetai Tech. Affected is an unknown function of the file /product.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
- Product
- Neetai Tech
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 7, 2022A vulnerability was found in Lógico y Creativo 1.0 and classified as critical.CVE-2020-36539 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability was found in Lógico y Creativo 1.0 and classified as critical. This issue affects some unknown processing. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely.
- Product
- Lógico y Creativo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 7, 2022A vulnerability classified as critical has been found in MINMAX.CVE-2020-36535 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability classified as critical has been found in MINMAX. This affects an unknown part of the file /newsDia.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely.
- Product
- MINMAX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 7, 2022A vulnerability was found in Klapp App and classified as problematic.CVE-2020-36533 · Other software · Klapp · reported by VulDBLow 3.7
A vulnerability was found in Klapp App and classified as problematic. This issue affects some unknown processing of the JSON Web Token Handler. The manipulation leads to weak authentication. The attack may be initiated remotely.
- Product
- App
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 7, 2022A vulnerability has been found in Klapp App and classified as problematic.CVE-2020-36532 · Other software · Klapp · reported by VulDBMedium 4.3
A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is recommended to upgrade the affected app.
- Product
- App
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 7, 2022A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22.CVE-2020-36531 · Other software · SevOne · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely.
- Product
- Network Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 7, 2022A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22.CVE-2020-36530 · Other software · SevOne · reported by VulDBMedium 6.3
A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.
- Product
- Network Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 7, 2022A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22.CVE-2020-36529 · Other software · SevOne · reported by VulDBHigh 8.8
A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the Traceroute Handler. The manipulation leads to privilege escalation with a command injection. It is possible to initiate the attack remotely.
- Product
- Network Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 7, 2022A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850.CVE-2020-36528 · Other software · unspecified · reported by VulDBMedium 5.5
A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.ashx which leads to broken access control. The attack requires authentication. Upgrading to version 1.0.4.851 is able to address this issue. It is recommended to upgrade the affected component.
- Product
- Platinum Mobile
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 7, 2022A vulnerability, which was classified as problematic, has been found in Server Status.CVE-2020-36527 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability, which was classified as problematic, has been found in Server Status. This issue affects some unknown processing of the component HTTP Status/SMTP Status. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
- Product
- Server Status
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 7, 2022A vulnerability classified as problematic was found in Countdown Timer.CVE-2020-36526 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability classified as problematic was found in Countdown Timer. This vulnerability affects unknown code of the component Macro Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
- Product
- Countdown Timer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 7, 2022A vulnerability classified as problematic has been found in Linking.CVE-2020-36525 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability classified as problematic has been found in Linking. This affects an unknown part of the component New Windows Macro. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
- Product
- Linking
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 7, 2022A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0.CVE-2022-1991 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo "><img src="" onerror="alert(document.cookie)"> leads to cross site scripting. It is possible to launch the attack remotely but it requires authentication. Exploit details have been disclosed to the public.
- Product
- Fast Food Ordering System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcyberthoth.medium.comvuldb.com
May 26, 2022A vulnerability classified as problematic has been found in Zoo Management System 1.0.CVE-2021-4232 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticket.php. The manipulation with the input <script>alert(1)</script> leads to cross site scripting. It is possible to launch the attack remotely.
- Product
- Zoo Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 24, 2022A vulnerability has been found in Airfield Online and classified as problematic.CVE-2021-4230 · Other software · unspecified · reported by VulDBLow 3.7
A vulnerability has been found in Airfield Online and classified as problematic. This vulnerability affects the path /backups/ of the MySQL backup handler. An attacker is able to get access to sensitive data without proper authentication. It is recommended to the change the configuration settings.
- Product
- Airfield Online
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 24, 2022A vulnerability classified as critical has been found in Cardo Systems Scala Rider Q3.CVE-2014-125001 · Other software · Cardo Systems · reported by VulDBHigh 8.1
A vulnerability classified as critical has been found in Cardo Systems Scala Rider Q3. Affected is the file /cardo/api of the Cardo-Updater. Unauthenticated remote code execution with root permissions is possible. Firewalling or disabling the service is recommended.
- Product
- Scala Rider Q3
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordremote-exploit.orgvuldb.com
May 24, 2022A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1.CVE-2013-10004 · Other software · Telecommunication Software · reported by VulDBMedium 6.5
A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwordScramble in the library SAMwinLIBVB.dll of the component Password Handler. Incorrect implementation of a hashing function leads to predictable authentication possibilities. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component.
- Product
- SAMwin Contact Center Suite
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 24, 2022A vulnerability classified as critical has been found in Telecommunication Software SAMwin Contact Center Suite 5.1.CVE-2013-10003 · Other software · Telecommunication Software · reported by VulDBMedium 6.5
A vulnerability classified as critical has been found in Telecommunication Software SAMwin Contact Center Suite 5.1. This affects the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the database handler. The manipulation leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component.
- Product
- SAMwin Contact Center Suite
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 24, 2022A vulnerability, which was classified as problematic, has been found in Home Clean Services Management System 1.0.CVE-2022-1840 · Other software · unspecified · reported by VulDBLow 2.4
A vulnerability, which was classified as problematic, has been found in Home Clean Services Management System 1.0. This issue affects register.php?link=registerand. The manipulation with the input <script>alert(1)</script> leads to cross site scripting. The attack may be initiated remotely but demands authentication. Exploit details have been disclosed to the public.
- Product
- Home Clean Services Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 24, 2022A vulnerability classified as critical was found in Home Clean Services Management System 1.0.CVE-2022-1839 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'/**/AND/**/(SELECT/**/5383/**/FROM/**/(SELECT(SLEEP(2)))JPeh)/**/AND/**/'frfq%'='frfq leads to sql injection. The attack can be initiated remotely but it requires authentication. Exploit details have been disclosed to the public.
- Product
- Home Clean Services Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 24, 2022A vulnerability classified as critical has been found in Home Clean Services Management System 1.0.CVE-2022-1838 · Other software · unspecified · reported by VulDBMedium 4.7
A vulnerability classified as critical has been found in Home Clean Services Management System 1.0. This affects an unknown part of admin/login.php. The manipulation of the argument username with the input admin%'/**/AND/**/(SELECT/**/5383/**/FROM/**/(SELECT(SLEEP(5)))JPeh)/**/AND/**/'frfq%'='frfq leads to sql injection. It is possible to initiate the attack remotely but it requires authentication. Exploit details have been disclosed to the public.
- Product
- Home Clean Services Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 24, 2022A vulnerability, which was classified as problematic, was found in Student Information System 1.0.CVE-2022-1819 · Other software · unspecified · reported by VulDBLow 2.4
A vulnerability, which was classified as problematic, was found in Student Information System 1.0. Affected is admin/?page=students of the Student Roll module. The manipulation with the input <script>alert(1)</script> leads to authenticated cross site scripting. Exploit details have been disclosed to the public.
- Product
- Student Information System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 23, 2022A vulnerability, which was classified as problematic, was found in Badminton Center Management System.CVE-2022-1817 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input </td><img src="" onerror="alert(1)"><td>1 leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 23, 2022A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0.CVE-2022-1816 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/view_accounts?type=zookeeper of the content module. The manipulation of the argument admin_name with the input <script>alert(1)</script> leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.
- Product
- Zoo Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 17, 2022A vulnerability, which was classified as critical, was found in WoWonder.CVE-2022-1753 · Other software · unspecified · reported by VulDBMedium 5.4
A vulnerability, which was classified as critical, was found in WoWonder. Affected is the file /requests.php which is responsible to handle group messages. The manipulation of the argument group_id allows posting messages in other groups. It is possible to launch the attack remotely but it might require authentication. A video explaining the attack has been disclosed to the public.
- Product
- WoWonder
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 29, 2022A vulnerability has been found in automad up to 1.10.9 and classified as problematic.CVE-2022-1536 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Home</title><script>alert("home")</script><title> leads to a cross site scripting. The attack can be initiated remotely but requires an authentication. The exploit details have disclosed to the public and may be used.
- Product
- automad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 29, 2022A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2.CVE-2022-1526 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input <script>alert(1);</script> leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login by the attacker. The exploit has been disclosed to the public and may be used.
- Product
- Emlog Pro
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 27, 2022A vulnerability, which was classified as problematic, has been found in GetSimple CMS.CVE-2022-1503 · Other software · GetSimple · reported by VulDBLow 3.5
A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like <script>alert(1)</script> leads to cross site scripting. The attack may be launched remotely but requires authentication. Expoit details have been disclosed within the advisory.
- Product
- CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 21, 2022The Labeling tool in Titus Classification Suite 18.8.1910.140 allows users to avoid the generation of a classification label by using Excel's safe mode.CVE-2021-43708 · Other software · Helpsystems · reported by MITREMedium 5.5
The Labeling tool in Titus Classification Suite 18.8.1910.140 allows users to avoid the generation of a classification label by using Excel's safe mode.
- Product
- Titus Data Classification
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 14, 2022A vulnerability classified as problematic was found in GhostPCL 9.55.0.CVE-2022-1350 · Other software · unspecified · reported by VulDBMedium 4.3
A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_free_object of the file gsmchunk.c. The manipulation with a malicious file leads to a memory corruption. The attack can be initiated remotely but requires user interaction. The exploit has been disclosed to the public as a POC and may be used. It is recommended to apply the patches to fix this issue.
- Product
- GhostPCL
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.ghostscript.combugs.ghostscript.com
Apr 9, 2022A vulnerability, which was classified as problematic, has been found in School Club Application System 1.0.CVE-2022-1288 · Other software · unspecified · reported by VulDBMedium 4.3
A vulnerability, which was classified as problematic, has been found in School Club Application System 1.0. This issue affects access to /scas/admin/. The manipulation of the parameter page with the input %22%3E%3Cimg%20src=x%20onerror=alert(1)%3E leads to a reflected cross site scripting. The attack may be initiated remotely and does not require any form of authentication. The exploit has been disclosed to the public and may be used.
- Product
- School Club Application System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 9, 2022A vulnerability classified as critical was found in School Club Application System 1.0.CVE-2022-1287 · Other software · unspecified · reported by VulDBMedium 6.5
A vulnerability classified as critical was found in School Club Application System 1.0. This vulnerability affects a request to the file /scas/classes/Users.php?f=save_user. The manipulation with a POST request leads to privilege escalation. The attack can be initiated remotely and does not require authentication. The exploit has been disclosed to the public and may be used.
- Product
- School Club Application System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 3, 2022A vulnerability classified as critical has been found in tildearrow Furnace dev73.CVE-2022-1211 · Other software · tildearrow · reported by VulDBMedium 6.3
A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the public and may be used.
- Product
- Furnace
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddrive.google.comgithub.com
Apr 3, 2022A vulnerability classified as problematic was found in LibTIFF 4.3.0.CVE-2022-1210 · Other software · unspecified · reported by VulDBMedium 4.3
A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the public and may be used.
- Product
- LibTIFF
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 29, 2022A vulnerability, which was classified as problematic, has been found in htmly 5.3 whis affects the component Edit Profile Module.CVE-2022-1087 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability, which was classified as problematic, has been found in htmly 5.3 whis affects the component Edit Profile Module. The manipulation of the field Title with script tags leads to persistent cross site scripting. The attack may be initiated remotely and requires an authentication. A simple POC has been disclosed to the public and may be used.
- Product
- htmly
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 29, 2022A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic.CVE-2022-1086 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic. Affected by this issue is the User Management Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
- Product
- DolphinPHP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 29, 2022A vulnerability classified as critical has been found in Microfinance Management System.CVE-2022-1083 · Other software · unspecified · reported by VulDBHigh 7.3
A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customer_type_number/account_number/account_status_number/account_type_number with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc leads to sql injection in multiple files. It is possible to launch the attack remotely.
- Product
- Microfinance Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 29, 2022A vulnerability was found in College Website Management System 1.0 and classified as problematic.CVE-2022-1075 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/classes/Master.php?f=save_contact of the component Contact Handler. The manipulation leads to persistent cross site scripting. The attack may be launched remotely and requires authentication.
- Product
- College Website Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuldb.comsourcecodester.com
Mar 29, 2022A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic.CVE-2022-1074 · Other software · TEM · reported by VulDBMedium 4.3
A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input <h1>HTML Injection</h1> in the WiFi settings of the dashboard leads to html injection.
- Product
- FLEX-1085
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 28, 2022A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic.CVE-2017-20016 · Other software · WEKA · reported by VulDBMedium 4.3
A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
- Product
- INTEREST Security Scanner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 28, 2022A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8.CVE-2017-20015 · Other software · WEKA · reported by VulDBLow 2.8
A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN Viewer. The manipulation with an unknown input leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
- Product
- INTEREST Security Scanner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 28, 2022A vulnerability, which was classified as problematic, has been found in WEKA INTEREST Security Scanner up to 1.8.CVE-2017-20014 · Other software · WEKA · reported by VulDBLow 2.8
A vulnerability, which was classified as problematic, has been found in WEKA INTEREST Security Scanner up to 1.8. Affected by this issue is some unknown functionality of the component Webspider. The manipulation with an unknown input leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
- Product
- INTEREST Security Scanner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 28, 2022A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8.CVE-2017-20013 · Other software · WEKA · reported by VulDBLow 2.8
A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration Handler. A manipulation leads to a local denial of service. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
- Product
- INTEREST Security Scanner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 28, 2022A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8.CVE-2017-20012 · Other software · WEKA · reported by VulDBLow 2.8
A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
- Product
- INTEREST Security Scanner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 28, 2022A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4.CVE-2010-10001 · Other software · Shemes · reported by VulDBMedium 5.3
A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Parser. The manipulation of the argument date with the input 1000000000000000 as part of a NZB File leads to a denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
- Product
- GrabIt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.