1096 matches found
UBUNTU-CVE-2024-34997
DISPUTED joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpypickle::NumpyArrayWrapper.readarray. NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content...
PT-2024-26286
Name of the Vulnerable Software and Affected Versions joblib version 1.4.2 Description A deserialization issue was found in the joblib.numpy pickle::NumpyArrayWrapper.read array component. This issue is disputed by the supplier, who claims that NumpyArrayWrapper is only used during caching of...
joblib 安全漏洞
joblib is a set of tools open-sourced by joblib to provide lightweight pipelining in Python. A security vulnerability exists in joblib v1.4.2, which stems from the presence of a deserialization vulnerability...
RHEL 5 : java-1.4.2-ibm-sap (RHSA-2012:0343)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0343 advisory. - HTTPS: block-wise chosen-plaintext attack against SSL/TLS BEAST CVE-2011-3389 - Oracle/IBM JDK: unspecified vulnerability fixed in 6u29...
WordPress Evergreen Content Poster plugin <= 1.4.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by CatFather Patchstack Alliance in WordPress Plugin Evergreen Content Poster versions = 1.4.2...
WordPress Evergreen Content Poster Plugin <= 1.4.2 is vulnerable to Broken Access Control
Software Evergreen Content Poster Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32824 Patch priority Low CVSS severity Low 5.4 Developer Evergreen Content Poster PSID 1d64e7ee89d8 Credits CatFather...
CVE-2024-32451
CVE-2024-32451 is a CSRF vulnerability in the WordPress plugin wpWax Legal Pages, affecting versions up to 1.4.2 (vulnerability exists in the plugin’s handling of CSRF-protected actions). The CVSS 3.1 metrics (NETWORK attack, LOW complexity, NONE privileges required, UI: Required, confidentiality...
PT-2024-24582 · WordPress · Wpwax Legal Pages
Name of the Vulnerable Software and Affected Versions: wpWax Legal Pages versions 1.4.2 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user...
WordPress Legal Pages plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Legal Pages versions = 1.4.2...
WordPress 130+ Widgets | Best Addons For Elementor – FREE plugin <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin Xpro Elementor Addons versions = 1.4.2...
WordPress Plugin Best Addons For Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress Paid Memberships Pro – Payfast Gateway Add On Plugin <= 1.4.1 is vulnerable to Sensitive Data Exposure
Software Paid Memberships Pro – Payfast Gateway Add On Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-30514 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID...
PT-2024-19454 · WordPress · The 130+ Widgets
Name of the Vulnerable Software and Affected Versions: The 130+ Widgets | Best Addons For Elementor – FREE plugin for WordPress versions up to, and including, 1.4.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's widgets due to insufficient input sanitization and...
CVE-2024-27190
Missing Authorization vulnerability in Jean-David Daviet Download Media.This issue affects Download Media: from n/a through 1.4.2...
PT-2024-21726 · Jean David Daviet · Download Media
Name of the Vulnerable Software and Affected Versions: Download Media versions n/a through 1.4.2 Description: The issue is related to a Missing Authorization vulnerability in Jean-David Daviet Download Media. Recommendations: For Download Media versions n/a through 1.4.2, update to a version late...
WordPress Plugin Easy Maintenance Mode Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-22368 · Corewcf · Corewcf
Name of the Vulnerable Software and Affected Versions: CoreWCF versions prior to 1.4.2 CoreWCF versions prior to 1.5.2 Description: The issue affects NetFraming based CoreWCF services, where extra system resources could be consumed by connections being left established instead of closing or...
CVE-2024-25768
OpenDMARC 1.4.2 contains a null pointer dereference vulnerability in /OpenDMARC/libopendmarc/opendmarcpolicy.c...
