WordPress Elespare Plugin <= 2.1.2 is vulnerable to Broken Access Control

Software Elespare Type Plugin Vulnerable versions = 2.1.2 Fixed in 2.1.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0900 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f7ab94a6cab5 Credits Lucio Sá Required privilege Subscribe...

Malicious code in wlwz-2312-0900 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66c7eed5fa24b1e44bdea6ae4f874af56e287e3c2f4ee9fe5323a42dc562d096 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-251 Malicious code in wlwz-2312-0900 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66c7eed5fa24b1e44bdea6ae4f874af56e287e3c2f4ee9fe5323a42dc562d096 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BELL-CVE-2017-0900 CVE-2017-0900 does not affect BellSoft software

Bulletin has no description...

CVE-2023-0900 AP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi

The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins...

CVE-2023-0900

The CVE-2023-0900 issue affects the Pricing Table Builder WordPress plugin (versions 1.1.6 and earlier). A parameter used in a SQL statement is not properly sanitized/escaped, enabling SQL injection. The vulnerability can be exploited by high-privilege administrators (admin) to access database co...

WordPress AP Pricing Tables Lite Plugin <= 1.1.6 is vulnerable to SQL Injection

Software AP Pricing Tables Lite Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-0900 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 2904c68cd1aa Credits Simone Onofri Donato Onofri Required privileg...

K01730454: Ruby vulnerabilities CVE-2017-0899, CVE-2017-0900, CVE-2017-0901, and CVE-2017-0902

Security Advisory Description CVE-2017-0899 RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences. CVE-2017-0900 RubyGems version 2.6.12 and earlie...

SUSE CVE-2017-0900

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a query command...

CVE-2022-0900

creationtimestamp| type| source ---|---|--- 2022-05-23 18:35:54+00:00| seen| https://t.me/cibsecurity/43171...

CVE-2022-0900 Cross-Site Scripting Vulnerability in DivvyDrive

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NetDataSoft DivvyDrive allows Stored XSS. This issue affects DivvyDrive: from unspecified before v.4.6.2.0...

CVE-2022-0900

DivvyDrive is affected by a stored XSS in its aciklama parameter for versions prior to 4.6.2.0. The issue stems from improper neutralization of input during web page generation, enabling an attacker to execute JavaScript in a victim’s browser and potentially access session information. Remediatio...

Mageia: Security Advisory (MGASA-2017-0482)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2013-0315)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-0900

The CVE-2021-0900 entry concerns the MediaTek apusys component, with an out-of-bounds read due to an incorrect bounds check. This could enable local information disclosure and requires System privileges for exploitation, with no user interaction needed. Documents consistently describe the affecte...

openSUSE 15 Security Update : xterm (openSUSE-SU-2021:0900-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:0900-1 advisory. - xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8...

SUSE: Security Advisory (SUSE-SU-2020:1570-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:0900-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0900

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'...

CVE-2020-0900

CVE-2020-0900 describes an elevation of privilege vulnerability in the Visual Studio Extension Installer Service caused by improper handling of file operations. An attacker with local access could log on and run a specially crafted application to exploit this flaw. Microsoft’s MSRC advisory and t...