1508 matches found
CVE-2022-3459
The WooCommerce Multiple Free Gift plugin for WordPress is vulnerable to gift manipulation in all versions up to, and including, 1.2.3. This is due to plugin not enforcing server-side checks on the products that can be added as a gift. This makes it possible for unauthenticated attackers to add...
CVE-2022-3459
The WooCommerce Multiple Free Gift plugin for WordPress is vulnerable to gift manipulation in all versions up to, and including, 1.2.3. This is due to plugin not enforcing server-side checks on the products that can be added as a gift. This makes it possible for unauthenticated attackers to add...
DEBIAN-CVE-2024-46704
In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix spruious data race in flushwork When flushing a work item for cancellation, flushwork knows that it exclusively owns the work item through its PENDING bit. 134874e2eee9 "workqueue: Allow cancelworksync and...
PT-2024-11594 · WordPress · Woocommerce Multiple Free Gift
Name of the Vulnerable Software and Affected Versions: WooCommerce Multiple Free Gift plugin for WordPress versions up to, and including, 1.2.3 Description: The issue arises from the plugin not enforcing server-side checks on the products that can be added as a gift. This allows unauthenticated...
GHSA-7J9P-67MM-5G87 LTI 1.3 Grade Pass Back Implementation has Missing Authorization Vulnerability
Problem TL;DR: Any LTI tool that is integrated with on the Open edX platform can post a grade back for any LTI XBlock so long as it knows or can guess the block location for that XBlock. In LTI 1.3, LTI tools can "pass back" scores that learners earn while using LTI tools to the edX platform. The...
CVE-2024-2694
The Betheme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 27.5.6 via deserialization of untrusted input of the 'mfn-page-items' post meta value. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...
CVE-2024-2694: Deserialization of Untrusted Data
The Betheme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 27.5.6 via deserialization of untrusted input of the 'mfn-page-items' post meta value. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...
WordPress Special Feed Items plugin <= 1.0.1 - Stored XSS via CSRF vulnerability
Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Special Feed Items versions = 1.0.1...
WordPress Special Feed Items Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software Special Feed Items Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8051 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 998826800645 Credits Daniel Ruf Required...
PT-2024-21587 · WordPress · Betheme
Name of the Vulnerable Software and Affected Versions: Betheme theme for WordPress versions up to, and including, 27.5.6 Description: The issue is related to PHP Object Injection via deserialization of untrusted input of the mfn-page-items post meta value. This allows authenticated attackers with...
CVE-2024-42698
Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...
CVE-2024-42698
Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...
JustEnoughItems 安全漏洞
JustEnoughItems JEI is a project and recipe viewing module for Minecraft by James Mitchell, an individual developer. A security vulnerability exists in JustEnoughItems version 19.5.0.33 and prior versions, which stems from an inability to validate Minecraft's slot index in JEI, which can lead to...
CVE-2024-42698
Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...
Roughly Enough Items 安全漏洞
Roughly Enough Items is a Mod for viewing items and recipes for Minecraft 1.13 - 1.18 by the individual developer shedaniel. A security vulnerability exists in Roughly Enough Items version v.16.0.729 and prior versions, which stems from a failure to validate slot indexes and reduce stack counts i...
PT-2024-30110
Name of the Vulnerable Software and Affected Versions Roughly Enough Items REI versions 16.0.729 and before Description The issue is related to a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, allowing in-game item duplication. This is...
CVE-2024-42698: Improper Validation of Array Index
Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...
CVE-2024-42698
Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...
CVE-2024-42698
Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...