CVE Vulnerabilities Archive - Page 15531 of 18763

CVE-2022-40674

February 23, 2023 by godfreyd94

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

CVE-2022-40673

February 23, 2023 by godfreyd94

KDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper::flushPageCache.

CVE-2022-40672

February 23, 2023 by godfreyd94

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CPO Shortcodes plugin <= 1.5.0 at WordPress.

CVE-2022-40671

February 23, 2023 by godfreyd94

Cross-Site Request Forgery (CSRF) vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress.

CVE-2022-4067

February 23, 2023 by godfreyd94

Cross-site Scripting (XSS) – Stored in GitHub repository librenms/librenms prior to 22.10.0.

CVE-2022-40669

February 23, 2023 by godfreyd94

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.