Vulnerabilidades

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious…

Format Plugins versions 1.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this…

Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Uncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.1465 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of…

Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Premierturk Information Technologies Inc. Excavation Management Information System allows Footprinting, Functionality Misuse. This issue affects Excavation Management Information…

Parse Server es un backend de código abierto que puede implementarse en cualquier infraestructura que pueda ejecutar Node.js. El método 'explain()' de MongoDB proporciona información detallada sobre los planes de ejecución de consultas, incluyendo el uso de índices, el comportamiento de escaneo de colecciones y las…

El plugin Contact Form 7 AWeber Extension para WordPress es vulnerable a la modificación no autorizada de datos debido a una comprobación de capacidad faltante en el endpoint AJAX 'wp_ajax_aweber_logreset' en todas las versiones hasta la 0.1.42, inclusive. Esto hace posible que atacantes autenticados, con acceso de…

El plugin HTML Forms - Simple WordPress Forms Plugin para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 1.5.5, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes…

Parse Server es un backend de código abierto que puede ser desplegado en cualquier infraestructura que pueda ejecutar Node.js. En las versiones 4.2.0 a 7.5.3, y 8.0.0 a 8.3.1-alpha.1, existe una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en la funcionalidad de carga de archivos al…

Una vulnerabilidad fue identificada en projectworlds Online Notes Sharing Platform 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /dashboard/userprofile.php. Tal manipulación del argumento image conduce a carga sin restricciones. El ataque puede ser realizado desde remoto. El exploit…

The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the copy_post_image() function in all versions up to, and including, 2.9.20. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make…

Deserialization of Untrusted Data vulnerability in Scott Reilly Preserve Code Formatting preserve-code-formatting allows Object Injection.This issue affects Preserve Code Formatting: from n/a through <= 4.0.1.

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows PHP Local File Inclusion.This issue affects Real Time Validation for Gravity Forms: from n/a through…

Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') en owenr88 Simple Contact Forms simple-contact-forms permite inclusión local de ficheros PHP. Este problema afecta a Simple Contact Forms: desde n/a hasta menor o igual…

Vulnerabilidad de deserialización de datos no confiables en CRM Perks WP Gravity Forms Keap/Infusionsoft gf-infusionsoft permite la inyección de objetos. Este problema afecta a WP Gravity Forms Keap/Infusionsoft: desde n/a hasta menor o igual que 1.2.3.

Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms permite XSS Reflejado. Este problema afecta a Range Slider Addon for Gravity Forms: desde n/a hasta menor o igual…

The Everest Forms (Pro) plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.7 via deserialization of untrusted input in the mime_content_type() function. This makes it possible for unauthenticated attackers to inject a PHP Object. This vulnerability may be exploited by…

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

Memory corruption while accessing a buffer during IOCTL processing.

Information disclosure while processing message from client with invalid payload.

Memory corruption while processing a GP command response.

Memory corruption while performing encryption and decryption commands.

Information disclosure while registering commands from clients with diag through diagHal.

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.