CVE-2024-13655 Flex Mag - Responsive WordPress News Theme <= 3.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion

The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanelofajaxcallback function in all versions up to, and including, 3.5.2. This makes it possible f...

CVE-2024-13655

CVE-2024-13655 affects the Flex Mag - Responsive WordPress News Theme for WordPress (versions up to 3.5.2). The root cause is a missing capability check in propanel_of_ajax_callback(), allowing authenticated attackers with Subscriber-level access and above to delete arbitrary option values, poten...

CVE-2024-13655 Flex Mag - Responsive WordPress News Theme <= 3.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion

The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanelofajaxcallback function in all versions up to, and including, 3.5.2. This makes it possible f...

CVE-2020-13655

An issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is set to movefile and the id parameter corresponds to a project the current user has access to, the file and target parameters are reflected...

CVE-2020-13655

CVE-2020-13655 affects Collabtive 3.0 and later. The issue is an XSS in managefile.php where, when action equals movefile and id corresponds to a project the user can access, the file and target parameters are reflected. This is a client-side scripting vulnerability that could enable code executi...

CVE-2017-13655

CVE-2017-13655 is rejected; this CVE ID does not represent an active vulnerability entry.

CVE-2017-13655

...

CVE-2019-13655

Imgix through 2019-06-19 allows remote attackers to cause a denial of service resource consumption by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory...

CVE-2019-13655

CVE-2019-13655 affects Imgix real-time image processing up to 2019-06-19. A small JPEG can be crafted to specify dimensions of 64250x64250, which is mishandled when loading the ‘whole image’ into memory, causing a denial of service via resource consumption. The description indicates a remote atta...

CVE-2018-13655

CVE-2018-13655 concerns the mintToken function of a smart contract implementation for the GFC Ethereum token. The underlying issue is an integer overflow in mintToken, which allows the contract owner to set the balance of an arbitrary user to any value. The available connected documents confirm t...