136 matches found
CVE-2024-0701
CVE-2024-0701 concerns the WordPress UserPro plugin. The vulnerability is described as a Security Feature Bypass caused by relying on client-side restrictions to enforce the Disable Registration setting, enabling unauthenticated attackers to create accounts even when registration is disabled. Dat...
CVE-2024-0701 UserPro <= 5.1.6 - Disabled Membership Registration Bypass
The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. This is due to the use of client-side restrictions to enforce the 'Disabled registration' Membership feature within the plugin's General settings. This makes it possible for...
CVE-2024-0701
The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. This is due to the use of client-side restrictions to enforce the 'Disabled registration' Membership feature within the plugin's General settings. This makes it possible for...
WordPress Userpro Plugin <= 5.1.6 is vulnerable to Bypass Vulnerability
Software Userpro Type Plugin Vulnerable versions = 5.1.6 Fixed in 5.1.7 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-0701 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 07d9348c166e Credits Rob Stevens Required privilege Unauthenticate...
MAL-2024-234 Malicious code in wlwz-2312-0701 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb763b3f3e8124c04be82c3c2d304cd01db01482c5a1908b2bf97ecef733ce4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2312-0701 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb763b3f3e8124c04be82c3c2d304cd01db01482c5a1908b2bf97ecef733ce4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-0701
Summary: CVE-2021-0701 involves the PowerVR kernel driver, specifically the PVRSRVBridgeSyncPrimOpCreate function, where a missing size check can cause an integer overflow leading to out-of-bounds heap access. This could enable local privilege escalation without additional execution privileges an...
Ubuntu: Security Advisory (USN-5881-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0045-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0045-1 advisory. - Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM...
Chromium: CVE-2023-0701 Heap buffer overflow in WebUI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2023-0701
Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interaction . Chromium security severity: Medium...
CVE-2023-0701
Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interaction . Chromium security severity: Medium...
CVE-2023-0701
Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interaction . Chromium security severity: Medium...
CVE-2023-0701
CVE-2023-0701 describes a heap buffer overflow in the WebUI of Google Chrome before 110.0.5481.77. The flaw can be triggered by a remote attacker who convinces a user to perform specific UI interactions, potentially leading to heap corruption via the UI. Affected software: Google Chrome/Chromium ...
KLA20220 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Full screen mode can be exploited to cause denial of service...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 15 security fixes, including: 1402270 High CVE-2023-0696: Type Confusion in V8. Reported by Haein Lee at KAIST Hacking Lab on 2022-12-18 1341541 High CVE-2023-0697: Inappropriate implementation in Full screen mode. Reported by Ahmed ElMasry on...
EulerOS Virtualization 2.10.1 : openssl (EulerOS-SA-2022-2060)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of...
EulerOS Virtualization 2.10.0 : openssl (EulerOS-SA-2022-2032)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of...
EulerOS 2.0 SP9 : openssl (EulerOS-SA-2022-1455)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3...
