WordPress Catch Themes Demo Import plugin versions prior to 1.8 suffer from a remote shell upload vulnerability.
999305fb949e529f94cd8317c66ad4e660226106492dac5ff2bb180f31a8f911Ubuntu Security Notice 5204-1 - Chris Bailey discovered that Django incorrectly handled evaluating submitted passwords. A remote attacker could possibly use this issue to consume resources, resulting in a denial of service. Dennis Brinkrolf discovered that Django incorrectly handled the dictsort template filter. A remote attacker could possibly use this issue to obtain sensitive information. Dennis Brinkrolf discovered that Django incorrectly handled certain file names. A remote attacker could possibly use this issue to save files to arbitrary filesystem locations.
324c16f9e69826cd0f602072eb228ffdfd2b033ade7c94b0a2684f1d2219a12dDixell XWEB 500 suffers from an arbitrary file write vulnerability.
8893724038713edfd0a473b757f5d2832dea41d77964d626f3b241d46aad30eaRed Hat Security Advisory 2022-0015-01 - Red Hat Single Sign-On 7.5 container images, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This is a security update Red Hat Single Sign-On 7.5, and includes one security fix.
0575dadfa587229dd808830d0bc7c86a64e5a167c637b0efbf58646786a84e63Gerapy version 0.9.7 suffers from a remote code execution vulnerability.
de39ced9083d9db765445d13a775b095cbaa05f19481263845c931fbe076d90eAffiliate Pro version 1.7 suffers from multiple cross site scripting vulnerabilities.
a7385cbd8ac891597837ba4d59fdc3e0787bd9941894a52c4c0244342d644e78Hostel Management System version 2.1 suffers from a cross site scripting vulnerability.
832158cb4d1ec5b505b212df18fdd464379c95a454031e01dc274b314d426ea9TermTalk Server version 3.24.0.2 suffers from an arbitrary file read vulnerability.
0ef579da7fba4caf33a17d5c809dc705991c0647b12c32d81a9fc1a54d5d49baRocket LMS version 1.1 suffers from a persistent cross site scripting vulnerability.
739ba55afb1b94fc1dd9001e616a349dfa3374f42ff68ec041f9844f8873dc56openSIS Student Information System version 8.0 suffers from a remote SQL injection vulnerability.
05228d9c28b0ab4c4e5afaae596304d9ca7b3355304111d3aca5878961d60d7fOnline Admission System version 1.0 suffers from an unauthenticated remote code execution vulnerability.
f9eae7730f2082038c9c6ef73b31857d2530f0ad86f0edd9e3f31a65e8ad3d55Hospitals Patient Records Management System version 1.0 suffers from an account takeover vulnerability.
e7502eafcbe432a44a80213cdbff1a8cc7f3223a98bc447cfa06a1b88ae8cfe2WordPress AAWP plugin version 3.16 suffers from a cross site scripting vulnerability.
bbe3c3c6098ea3dafe885a1b7c7a164517c0c52c3b30c448960d1f5305f863d2uDoctorAppointment version 2.1.1 suffers from multiple cross site scripting vulnerabilities.
10648f3ef26d72f50dbf7b1b2cbd073cc26df955d71071edf73a28b2d9834ae5Automox Agent version 32 suffers from a local privilege escalation vulnerability.
9230e9c9b89d0fb034c346e20cdd739f9806e11b58286a6409c48f75243b1749Vodafone H-500-s version 3.5.10 suffers from a wifi password disclosure vulnerability.
141bb2c0b6895ca188f6be64c7802d296621286ca56799588453acf04705218eHospitals Patient Records Management System version 1.0 suffers from a remote SQL injection vulnerability.
e92946ead637f9f72a098b7f5a793ca56c8cf95d8e3c4bf2327700ab29a251b7Easy Cart Shopping Cart version 2021 suffers from a cross site scripting vulnerability.
88a378d8c274c8e35bc8508f8974e9c3641ec919c65d14f1430ee13662e27e08AWebServer GhostBuilding version 18 suffers from a denial of service vulnerability.
d371f076ae115676c2291469b6fc2df33aaf707396311b807da94daade7f8863Virtual Airline Manager version 2.6.2 suffers from a remote SQL injection vulnerability.
3f72c8aaee9b1896ad3e03ab1921989d4c99e218c46f4742e2d324e100cbf39ccWifi Hotspot Wireless CP suffers from a code execution vulnerability.
13930403d64c5ddf8e24ee1cd9d5585eacd851fcd47aa3984dbc4909d5c2f854RiteCMS versions 3.1.0 and below suffer from an arbitrary file overwrite vulnerability.
e9fa75c629af64ae183c5725e751e06ae70b1b99a2ae57f02be8cb0d8c246b33RiteCMS versions 3.1.0 and below suffer from an arbitrary file deletion vulnerability.
1df19daa585e534af2fdd30939aae2a3e509e07d0fc2be95e5611c25f6237ab1VMware Security Advisory 2022-0001 - VMware Workstation, Fusion and ESXi updates address a heap overflow vulnerability.
7f47b277901c3528ef9176f5a918b266fad75f7bb006276b619415d109b0eb0eSafari Montage version 8.5 suffers from a cross site scripting vulnerability.
b7e3cde2fa93fc05717571899f1f5d1add9c59478beed0a26fc81e4c5c2fd2ac
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed