PT-2024-16217 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical issue affects the uploadIcon function of the file /application/index/controller/Screen.php in the Icon Handler component, leading to unrestricted upload. The attack can be initiated remotely...

openBI Code Issues Vulnerabilities

openBI is a big data visualization solution from openBI. A code issue vulnerability exists in openBI version 1.0.8, which stems from an unrestricted file upload in the uploadIcon method of the /application/index/controller/Screen.php file...

Security Bulletin: Security Vulnerabilities in Liberty affect IBM Voice Gateway

Summary Security Vulnerabilities in Liberty affect IBM Voice Gateway Vulnerability Details CVEID:CVE-2023-46158 DESCRIPTION: IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to improper resource expiration handling. IBM X-Force ID...

Security Bulletin: Security Vulnerabilities in Liberty affect IBM Voice Gateway

Summary Security Vulnerabilities in Liberty affect IBM Voice Gateway Vulnerability Details CVEID:CVE-2023-46158 DESCRIPTION: IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to improper resource expiration handling. IBM X-Force ID...

PT-2024-14482 · Unknown · Woocommerce Tranzila Payment Gateway

Name of the Vulnerable Software and Affected Versions: WooCommerce Tranzila Payment Gateway versions 1.0.8 and earlier Description: The issue is related to the deserialization of untrusted data in the Anton Bond WooCommerce Tranzila Payment Gateway. Recommendations: For versions 1.0.8 and earlier...

WordPress Backup Migration Plugin 1.0.8 < 1.4.0 Remote File Inclusion Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:backupbliss:backupmigration"; if description...

instipod DuoUniversalKeycloakAuthenticator challenge information disclosure vulnerability

Talos Vulnerability Report TALOS-2023-1907 instipod DuoUniversalKeycloakAuthenticator challenge information disclosure vulnerability December 23, 2023 CVE Number CVE-2023-49594 SUMMARY An information disclosure vulnerability exists in the challenge functionality of instipod...

PT-2023-32828 · WordPress +1 · Backup Migration +1

Name of the Vulnerable Software and Affected Versions: Backup Migration plugin for WordPress versions 1.0.8 through 1.3.9 Description: The issue allows unauthenticated attackers to include remote files on the server, resulting in code execution, via the content-dir HTTP header. Successful...

WordPress Plugin Drag and Drop Multiple File Upload for WooCommerce Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

PT-2023-14662 · Woocommerce · Drag/Drop Multiple File Upload For Woocommerce

Name of the Vulnerable Software and Affected Versions: Drag and Drop Multiple File Upload for WooCommerce versions 1.0.8 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Drag and Drop Multiple File Upload for WooCommerce plugin...

CVE-2023-41128

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Iqonic Design WP Roadmap – Product Feedback Board allows Stored XSS.This issue affects WP Roadmap – Product Feedback Board: from n/a through 1.0.8...

PT-2023-27812 · Iqonic Design · Iqonic Design Wp Roadmap – Product Feedback Board

Name of the Vulnerable Software and Affected Versions: Iqonic Design WP Roadmap – Product Feedback Board versions 1.0.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as cross-site scripting. This allows for stored XSS...

WordPress Plugin Easy Hide Login Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Security Bulletin: Security Vulnerabilities in redisson package affect IBM Voice Gateway

Summary Security Vulnerabilities in redisson package affect the SMS Gateway component of IBM Voice Gateway Vulnerability Details CVEID: CVE-2023-42809 DESCRIPTION: Redisson could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By persuadi...

GHSA-3J2F-58RQ-G6P7 Sureness uses hardcoded key

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

CVE-2023-31581

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

Dromara Sureness Trust Management Issues Vulnerability

Sureness is dromara open source a simple and efficient security framework . Focused on API protection. A security vulnerability exists in versions prior to Dromara Sureness v1.0.8 that stems from the use of hard-coded keys when creating and validating Json Web tokens...

CVE-2023-41237

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose Pro theme = 1.0.8 versions...

SUSE CVE-2023-4782

Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the init operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7...

PT-2023-8527

Name of the Vulnerable Software and Affected Versions WP Sessions Time Monitoring Full Automatic WordPress plugin version 1.0.8 and earlier Description The issue is related to the lack of sanitization of the request URL or query parameters before using them in an SQL query. This allows...