recently project recently vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fetch_external_image() function in versions up to, and including, 3.0.4. This makes it possible for authenticated malicious users to upload arbitrary files on the ...

Recently Project Recently

6.1

CVSSv3

ScratchTools is a web extension designed to make interacting with the Scratch programming language community (Scratching) easier. In affected versions anybody who uses the Recently Viewed Projects feature is vulnerable to having their account taken over if they view a project tha...

Scratchstatus Scratchtools

9.8

CVSSv3

Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a large SMTP request.

Qmail Project Qmail -Canonical Ubuntu Linux 20.04 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

1 Github repository

6.1

CVSSv3

The handlebars package prior to 4.0.0 for Node.js allows remote malicious users to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted.

Handlebars.js Project Handlebars.js

1 Github repository

6.1

CVSSv3

mustache package prior to 2.2.1 for Node.js allows remote malicious users to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted.

Mustache.js Project Mustache.js

6.5

CVSSv3

usrsctp prior to 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

Usrsctp Project Usrsctp

1 Article

NA

The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote malicious users to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.

Microsoft Photodraw 2000 1.0 Microsoft Powerpoint 2000 Microsoft Project 2000 Microsoft Access 2000 Microsoft Word 2000 Microsoft Works 2000 Microsoft Office 2000 Microsoft Outlook 2000 Microsoft Excel 2000 Microsoft Frontpage 2000

7.5

CVSSv3

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known...

Apache Http Server 2.4.49 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Netapp Cloud Backup -

1 Article

NA

Mozilla Firefox prior to 1.5.0.7 and SeaMonkey prior to 1.0.5 allows remote malicious users to bypass the security model and inject content into the sub-frame of another site via targetWindow.frames[n].document.open(), which facilitates spoofing and other attacks.

Mozilla Firefox Mozilla Seamonkey

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook