Month: November 2023

Inkdrop code execution | CVE-2023-44141

November 2, 2023

NAME__________Inkdrop code executionPlatforms Affected:Inkdrop Inkdrop 5.6.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Inkdrop could allow a local attacker to execute arbitrary code on the...

Carousel, Recent Post Slider and Banner Slider plugin for WordPress cross-site scripting | CVE-2023-5362

November 2, 2023

NAME__________Carousel, Recent Post Slider and Banner Slider plugin for WordPress cross-site scriptingPlatforms Affected:Spicethemes Carousel Recent Post Slider and Banner Slider...

Live updates from Excel plugin for WordPress cross-site scripting | CVE-2023-5116

November 2, 2023

NAME__________Live updates from Excel plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Live updates from Excel plugin for WordPress 2.3.2 WordPress Live...

Virtualmin cross-site scripting | CVE-2023-47097

November 2, 2023

NAME__________Virtualmin cross-site scriptingPlatforms Affected:Virtualmin Virtualmin 7.7Risk Level:7.2Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Virtualmin is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

Hitachi Energy eSOMS information disclosure | CVE-2023-5514

November 2, 2023

NAME__________Hitachi Energy eSOMS information disclosurePlatforms Affected:Hitachi Energy eSOMS 6.0 Hitachi Energy eSOMS 6.3.13Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Hitachi Energy eSOMS could allow...

iframe forms plugin for WordPress cross-site scripting | CVE-2023-5073

November 2, 2023

NAME__________iframe forms plugin for WordPress cross-site scriptingPlatforms Affected:WordPress iframe forms plugin for WordPress 1.0 WordPress iframe forms plugin for WordPress...

Virtualmin cross-site scripting | CVE-2023-47094

November 2, 2023

Grid Plus plugin for WordPress security bypass | CVE-2023-5251

November 2, 2023

NAME__________Grid Plus plugin for WordPress security bypassPlatforms Affected:G5Theme Grid Plus Plugin for WordPress 1.3.2 G5Theme Grid Plus plugin for WordPress...

UNISOC mobile phone chipsets for Android denial of service | CVE-2022-48458

November 2, 2023

NAME__________UNISOC mobile phone chipsets for Android denial of servicePlatforms Affected:Unisoc SC9863A Unisoc SC9832E Unisoc SC7731E Unisoc T610 Unisoc T606 Unisoc...

UNISOC mobile phone chipsets for Android information disclosure | CVE-2023-42631

November 2, 2023

NAME__________UNISOC mobile phone chipsets for Android information disclosurePlatforms Affected:Unisoc SC9863A Unisoc SC9832E Unisoc SC7731E Unisoc T610 Unisoc T606 Unisoc T760...

Hitachi Energy eSOMS information disclosure | CVE-2023-5515

November 2, 2023

Buzzsprout Podcasting plugin for WordPress cross-site scripting | CVE-2023-5335

November 2, 2023

NAME__________Buzzsprout Podcasting plugin for WordPress cross-site scriptingPlatforms Affected:Buzzsprout Buzzsprout Podcasting plugin for WordPress 1.8.4Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Buzzsprout Podcasting plugin for...

Tenable Nessus and Tenable Nessus Agent privilege escalation | CVE-2023-5847

November 2, 2023

NAME__________Tenable Nessus and Tenable Nessus Agent privilege escalationPlatforms Affected:Tenable Nessus 10.4.1 Tenable Nessus 10.3.1 Tenable Nessus Agent 10.4.2Risk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges...

FareHarbor plugin for WordPress SQL injection | CVE-2023-5252

November 2, 2023

NAME__________FareHarbor plugin for WordPress SQL injectionPlatforms Affected:FareHarbor FareHarbor plugin for WordPress 3.6.7Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________FareHarbor plugin for WordPress is vulnerable...

TOTOLINK A3300R command execution | CVE-2023-46993

November 2, 2023

NAME__________TOTOLINK A3300R command executionPlatforms Affected:TOTOLINK A3300R 17.0.0cu.557_B20221024Risk Level:7.3Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________TOTOLINK A3300R could allow a remote attacker to execute...

Photos and Files Contest Gallery plugin for WordPress cross-site scripting | CVE-2023-5307

November 2, 2023

NAME__________Photos and Files Contest Gallery plugin for WordPress cross-site scriptingPlatforms Affected:Contest Gallery Photos and Files Contest Gallery plugin for WordPress...

UNISOC mobile phone chipsets for Android information disclosure | CVE-2023-42650

November 2, 2023

NAME__________UNISOC mobile phone chipsets for Android information disclosurePlatforms Affected:Unisoc SC9863A Unisoc SC9832E Unisoc SC7731E Unisoc T610 Unisoc T606 Unisoc T760...

TOTOLINK X6000R command execution | CVE-2023-46979

November 2, 2023

NAME__________TOTOLINK X6000R command executionPlatforms Affected:TOTOLINK X6000R 9.4.0cu.852_B20230719Risk Level:7.3Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________TOTOLINK X6000R could allow a remote attacker to execute...

UNISOC mobile phone chipsets for Android denial of service | CVE-2022-48457

November 2, 2023

NAME__________UNISOC mobile phone chipsets for Android denial of servicePlatforms Affected:Unisoc SC9863A Unisoc SC9832E Unisoc SC7731E Unisoc T610 Unisoc T606 Unisoc...

UNISOC mobile phone chipsets for Android information disclosure | CVE-2023-42634

November 2, 2023

NAME__________UNISOC mobile phone chipsets for Android information disclosurePlatforms Affected:Unisoc SC9863A Unisoc SC9832E Unisoc SC7731E Unisoc T610 Unisoc T606 Unisoc T760...

UNISOC mobile phone chipsets for Android information disclosure | CVE-2023-42647

November 2, 2023

NAME__________UNISOC mobile phone chipsets for Android information disclosurePlatforms Affected:Unisoc SC9863A Unisoc SC9832E Unisoc SC7731E Unisoc T610 Unisoc T606 Unisoc T760...

Cisco Firepower Management Center Software cross-site scripting | CVE-2023-20074

November 2, 2023

NAME__________Cisco Firepower Management Center Software cross-site scriptingPlatforms Affected:Cisco Firepower Management CenterRisk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Cisco Firepower Management Center Software is vulnerable...

TOTOLINK LR1200GB buffer overflow | CVE-2023-46977

November 2, 2023

NAME__________TOTOLINK LR1200GB buffer overflowPlatforms Affected:TOTOLINK LR1200GB 9.1.0u.6619_B20230130Risk Level:7.3Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________TOTOLINK LR1200GB is vulnerable to a stack-based buffer overflow,...

UNISOC mobile phone chipsets for Android information disclosure | CVE-2023-42642

November 2, 2023

NAME__________UNISOC mobile phone chipsets for Android information disclosurePlatforms Affected:Unisoc SC9863A Unisoc SC9832E Unisoc SC7731E Unisoc T610 Unisoc T606 Unisoc T760...

Month: November 2023

Inkdrop code execution | CVE-2023-44141

Carousel, Recent Post Slider and Banner Slider plugin for WordPress cross-site scripting | CVE-2023-5362

Live updates from Excel plugin for WordPress cross-site scripting | CVE-2023-5116

Virtualmin cross-site scripting | CVE-2023-47097

Hitachi Energy eSOMS information disclosure | CVE-2023-5514

iframe forms plugin for WordPress cross-site scripting | CVE-2023-5073

Virtualmin cross-site scripting | CVE-2023-47094

Grid Plus plugin for WordPress security bypass | CVE-2023-5251

UNISOC mobile phone chipsets for Android denial of service | CVE-2022-48458

UNISOC mobile phone chipsets for Android information disclosure | CVE-2023-42631

Hitachi Energy eSOMS information disclosure | CVE-2023-5515

Buzzsprout Podcasting plugin for WordPress cross-site scripting | CVE-2023-5335

Tenable Nessus and Tenable Nessus Agent privilege escalation | CVE-2023-5847

FareHarbor plugin for WordPress SQL injection | CVE-2023-5252

TOTOLINK A3300R command execution | CVE-2023-46993

Photos and Files Contest Gallery plugin for WordPress cross-site scripting | CVE-2023-5307

UNISOC mobile phone chipsets for Android information disclosure | CVE-2023-42650

TOTOLINK X6000R command execution | CVE-2023-46979

UNISOC mobile phone chipsets for Android denial of service | CVE-2022-48457

UNISOC mobile phone chipsets for Android information disclosure | CVE-2023-42634

UNISOC mobile phone chipsets for Android information disclosure | CVE-2023-42647

Cisco Firepower Management Center Software cross-site scripting | CVE-2023-20074

TOTOLINK LR1200GB buffer overflow | CVE-2023-46977

UNISOC mobile phone chipsets for Android information disclosure | CVE-2023-42642

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases Best Practice Guidance for Mobile Communications

CVE Alert: CVE-2024-37605

CVE Alert: CVE-2024-12179

CVE Alert: CVE-2024-11422

You may have missed