99 matches found
CVE-2022-0384
The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapigetwpusers AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog...
RHSA-2026:0384
creationtimestamp| type| source ---|---|--- 2026-01-08 17:49:29+00:00| seen| https://gist.github.com/Darkcrai86/6d190f25f63737d26efffc2d4389135b 2026-01-08 18:11:57+00:00| published-proof-of-concept| Telegram/Lge4284wsR8RZQjN49TNfOaqkj39MhV6KOAFAkydmYlrvo 2026-01-24 21:25:55+00:00| seen|...
EUVD-2026-0384
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
CVE-2020-0384
In Parseart of easmdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
CVE-2019-0384
Transaction Management in SAP Treasury and Risk Management corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 does not perform necessary authorization checks for functionalities that require user identity...
CVE-2024-0384
creationtimestamp| type| source ---|---|--- 2024-02-05 23:31:29+00:00| seen| https://t.me/ctinow/179600 2024-02-12 08:06:49+00:00| seen| https://t.me/ctinow/182930...
CVE-2024-0384 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes
The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Recipe Notes in all versions up to, and including, 9.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level and above...
CVE-2024-0384
The CVE-2024-0384 vulnerability affects the WP Recipe Maker plugin for WordPress, where Stored Cross-Site Scripting is possible via Recipe Notes in all versions up to 9.1.0 due to insufficient input sanitization and output escaping. Authentication requirement is at contributor level or higher, en...
CVE-2023-0384
creationtimestamp| type| source ---|---|--- 2023-04-20 12:35:35+00:00| seen| https://t.me/cibsecurity/62500...
CVE-2023-0384 Uncontrolled Resource Consuption in M-Files Server
User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job...
CVE-2023-0384
CVE-2023-0384 affects M‑Files Server prior to 23.4.12528.1, where user‑controlled operations can cause uncontrolled memory consumption in a scheduled job, leading to a Denial of Service. The issue is documented across multiple sources (e.g., M‑Files security advisories, CNVD, PT Security) with th...
CVE-2023-0384 Uncontrolled Resource Consuption in M-Files Server
User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job...
CVE-2022-0384
The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapigetwpusers AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog...
CVE-2022-0384 Video Conferencing with Zoom < 3.8.17 - E-mail Address Disclosure
The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapigetwpusers AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog...
CVE-2022-0384
The CVE-2022-0384 entry applies to the Video Conferencing with Zoom WordPress plugin prior to version 3.8.17. The vulnerability arises from lack of authorization in the vczapi_get_wp_users AJAX action, allowing any authenticated user (e.g., subscribers) to download the blog’s registered email add...
Mageia: Security Advisory (MGASA-2017-0384)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2015-0384)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2021-0384)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2014-0239)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2014-0384)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...