237 matches found
WordPress Advanced Google reCAPTCHA plugin <= 1.25 - Brute Force Protection IP Unblock vulnerability
Brute Force Protection IP Unblock vulnerability discovered by Max Boll b0lli in WordPress Plugin Advanced Google reCAPTCHA versions = 1.25...
WordPress Sinking Dropdowns plugin <= 1.25 - CSRF to Privilege Escalation vulnerability
CSRF to Privilege Escalation vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Sinking Dropdowns versions = 1.25...
WordPress plugin Featured Posts Scroll 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
WordPress Featured Posts Scroll plugin <= 1.25 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Featured Posts Scroll versions = 1.25...
PT-2024-22821 · Elecom · Elecom Wrc-X3200Gst3-B +1
Name of the Vulnerable Software and Affected Versions: ELECOM WRC-X3200GST3-B versions 1.25 and earlier ELECOM WRC-G01-W versions 1.24 and earlier Description: The issue allows a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending...
ELECOM wireless LAN routers 安全漏洞
ELECOM wireless LAN routers are a series of routers from ELECOM Japan. A security vulnerability exists in ELECOM wireless LAN routers that stems from the presence of an information disclosure vulnerability. An attacker can exploit this vulnerability by sending a malicious request to steal...
CVE-2024-1447
The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aThemes Slider button element in all versions up to, and including, 1.25 due to insufficient input sanitization and output escaping on user supplied link. This makes it possible for authenticated...
PT-2024-18053 · WordPress · Sydney Toolbox
Name of the Vulnerable Software and Affected Versions: Sydney Toolbox plugin for WordPress versions up to, and including, 1.25 Description: The issue is related to Stored Cross-Site Scripting via the plugin's aThemes Slider button element due to insufficient input sanitization and output escaping...
Nginx 1.25.x < 1.25.4 Multiple Vulnerabilities
According to its Server response header, the installed version of nginx is 1.25.x prior to 1.25.4. It is, therefore, affected by the following issues : - A NULL pointer dereference in HTTP/3. CVE-2024-24989 - A Use-after-free in HTTP/3. CVE-2024-24990 Note that the scanner has not tested for thes...
Service Update 1.25 for Microsoft Dynamics CRM (on-premises) 9.1
None None...
PT-2024-19232 · Unknown · Magazine3 Schema & Structured Data For Wp & Amp
Name of the Vulnerable Software and Affected Versions: Magazine3 Schema & Structured Data for WP & AMP versions 1.25 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an...
GHSA-HQ6Q-C2X6-HMCH vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, spark-operator, ip-masq-agent, aws-efs-csi-driver-fips, kubernetes-dns-node-cache, nodetaint, prometheus-adapter, aws-ebs-csi-driver...
CVE-2023-5528 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, spark-operator, ip-masq-agent, aws-efs-csi-driver-fips, kubernetes-dns-node-cache, nodetaint, prometheus-adapter, aws-ebs-csi-driver...
CVE-2023-3676 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: up, k3d, buildkitd, kubevela, spark-operator, kubeflow, cortex, terraform-provider-sendgrid, slsa-verifier, dgraph, kubescape, src, aactl, scorecard...
CVE-2023-45645
Cross-Site Request Forgery CSRF vulnerability in InfoD74 WP Open Street Map plugin = 1.25 versions...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: flux-source-controller, dex, terraform-provider-azurerm, certificate-transparency, flux-kustomize-controller, terraform-provider-aws, slsa-verifier, memcached-exporter, atlantis, cue, pulumi-language-java, kots, hey, ip-masq-agent, kubewatch, pulumi,...
Security Bulletin: IBM Cloud Kubernetes Service is affected by two containerd security vulnerabilities (CVE-2023-28642) (CVE-2023-27561)
Summary IBM Cloud Kubernetes Service is affected by two security vulnerabilities found in containerd where 1 runc could allow a remote attacker to bypass security restrictions, caused by a symbolic link following vulnerability CVE-2023-28642 and 2 runc could allow a local authenticated attacker t...
