go-zero Security Vulnerabilities

go-zero is a web and RPC framework open sourced by the go-zero team. A security vulnerability exists in go-zero versions prior to 1.4.4 that stems from allowing a user to specify filters with configurable parameters, leading to malicious domain bypass...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

PT-2024-21806 · Zero G · Go-Zero

Name of the Vulnerable Software and Affected Versions: go-zero versions prior to 1.4.4 Description: The issue concerns the CORS Filter feature in go-zero, which allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to...

CVE-2024-0767

The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.4. This is due to missing or incorrect nonce validation on the ajaxpluginactivation function. This makes it possible for unauthenticated...

CVE-2024-0768

CVE-2024-0768 affects Envo’s Elementor Templates & Widgets for WooCommerce for WordPress, with CSRF in the ajax_theme_activation path. It is exploitable by unauthenticated attackers who can trick an administrator into performing an action (activating an arbitrary installed theme). Affected versio...

WordPress Envo's Elementor Templates & Widgets for WooCommerce Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Envo's Elementor Templates & Widgets for WooCommerce Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-0768 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

WordPress Plugin Elementor Templates & Widgets for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress plugin Better Search Replace security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

CVE-2023-51669

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artios Media Product Code for WooCommerce allows Stored XSS.This issue affects Product Code for WooCommerce: from n/a through 1.4.4...

PT-2024-14229 · Unknown · Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Code for WooCommerce versions 1.4.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

WordPress Better Search Replace Plugin <= 1.4.4 is vulnerable to PHP Object Injection

Software Better Search Replace Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2023-6933 Patch priority High CVSS severity High 9 Developer Claim ownership PSID 3ac241f51ac9 Credits Sam Pizzey mopman Required privilege...

CVE-2023-51545

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

WordPress WordPress Backup & Migration Plugin <= 1.4.3 is vulnerable to Broken Access Control

Software WordPress Backup & Migration Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-52183 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e20ae588b69a Credits Abdi Pranata...

CVE-2023-44298

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service...

CVE-2023-44297

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial ...

CVE-2023-44298

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service...

Dell PowerEdge Server BIOS Security Vulnerability

The Dell PowerEdge Server BIOS is a system update driver for Dell, a Dell USA company. A security vulnerability exists in the Dell PowerEdge Server BIOS and Dell Precision BIOS version 1.4.4, which stems from a vulnerability that could allow an attacker to launch information tampering, code...

Dell PowerEdge Server BIOS Security Vulnerability

Dell PowerEdge Server BIOS is a system update driver for Dell, a Dell USA company. A security vulnerability exists in Dell PowerEdge Server BIOS, Dell Precision BIOS version 1.4.4. An attacker could exploit the vulnerability to cause information disclosure, information tampering, code execution,...

PT-2023-29196 · Dell +1 · Dell Poweredge +2

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge platforms 16G Intel E5 BIOS version 1.4.4 Dell Precision BIOS version 1.4.4 Description: The issue concerns active debug code security vulnerability in the BIOS. An unauthenticated physical attacker could potentially exploit...

PT-2023-29197 · Dell · Dell Poweredge +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS version 1.4.4 Description: The issue concerns active debug code security vulnerability in the BIOS. An unauthenticated physical attacker could potentially exploit this, leadin...