CVE-2024-1208

creationtimestamp| type| source ---|---|--- 2024-02-13 17:16:16+00:00| seen| https://t.me/ctinow/183960 2024-02-21 21:27:40+00:00| seen| https://t.me/arpsyndicate/3873 2024-02-25 14:46:21+00:00| seen| https://t.me/ctinow/192897...

CVE-2024-1208

The CVE-2024-1208 family concerns the LearnDash LMS WordPress plugin. Affected: LearnDash LMS plugin for WordPress; vulnerability: Sensitive Information Exposure via the API that could allow unauthenticated access to quiz questions. Documented impact includes access to quiz questions and related ...

WordPress LearnDash LMS Plugin <= 4.10.2 is vulnerable to Sensitive Data Exposure

Software LearnDash LMS Type Plugin Vulnerable versions = 4.10.2 Fixed in 4.10.3 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1208 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 27fca665f224 Credits Karl Emil Nikka Required...

Malicious code in wlwz-2312-1208 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3b57b0a1352754fd5a1aa9da1262c17ed9a8bacc06b15e1cfc9e4f94d52f954 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-286 Malicious code in wlwz-2312-1208 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3b57b0a1352754fd5a1aa9da1262c17ed9a8bacc06b15e1cfc9e4f94d52f954 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cisco Nexus 1000V VSM/VEM Communication Encryption Bypass (CVE-2013-1208)

The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication, which allows remote attackers to intercept or modify network traffic by leveraging certain Layer 2 or Layer 3 access, aka Bug ID...

CVE-2023-1208

This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability...

CVE-2023-1208

CVE-2023-1208 refers to the WordPress HTTP Headers plugin, prior to version 1.18.11, where an arbitrary data write to arbitrary files leads to Remote Code Execution (RCE). The vulnerability is described as an access/authorization issue within the plugin, enabling an attacker with sufficient privi...

CVE-2023-1208 HTTP Headers < 1.18.11 - Admin+ Remote Code Execution

This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability...

CVE-2023-1208 HTTP Headers < 1.18.11 - Admin+ Remote Code Execution

This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability...

WordPress HTTP Headers Plugin < 1.18.11 is vulnerable to Remote Code Execution (RCE)

Software HTTP Headers Type Plugin Vulnerable versions 1.18.11 Fixed in 1.18.11 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2023-1208 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID d18b01c455ff Credits qerogramat Kakao Style Corp. Required...

WordPress Ultimate Member Plugin <= 2.3.2 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ultimatemember:ultimatemember"; ifdescription...

CVE-2022-1208

The CVE-2022-1208 entry concerns the WordPress Ultimate Member plugin. A stored cross-site scripting (XSS) flaw exists in the Biography field on individual user profile pages due to insufficient input sanitization and output escaping, allowing HTML-encoded scripts to be reflected on the page. Aff...

SUSE: Security Advisory (SUSE-SU-2019:1208-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1208

The CVE-2021-1208 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue stems from improper validation in the web-based management interface, allowing an authenticated, remote attacker with valid administrator credentials to execute arbitrary code as root or cau...

Microsoft Windows Multiple Vulnerabilities (KB4561612)

This host is missing a critical security update according to Microsoft KB4561612 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1236

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1208...

RHEL 7 : qemu-kvm (RHSA-2020:1208)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1208 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the...

Important: Red Hat Security Advisory: qemu-kvm security update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2020-1208)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...