5377 matches found
WordPress Simple User Registration Plugin <= 6.0 is vulnerable to Broken Authentication
Software Simple User Registration Type Plugin Vulnerable versions = 6.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-49604 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 22ee8177d626 Credits...
WordPress Advanced Advertising System Plugin <= 1.3.1 is vulnerable to PHP Object Injection
Software Advanced Advertising System Type Plugin Vulnerable versions = 1.3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49624 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 02d433e2c1ec Credits Mika Required privilege...
WordPress SW Contact Form Plugin <= 1.0 is vulnerable to SQL Injection
Software SW Contact Form Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-49612 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 50cfc368b184 Credits João Pedro S Alcântara Kinorth Required privilege...
CVE-2024-47459
creationtimestamp| type| source ---|---|--- 2024-10-17 18:19:03+00:00| seen| https://t.me/cvedetector/8189...
CVE-2024-47375
creationtimestamp| type| source ---|---|--- 2024-10-05 18:48:39+00:00| seen| https://t.me/cvedetector/7110...
grafana security update
9.2.10-18 - Resolves RHEL-47191...
CVE-2024-9136
creationtimestamp| type| source ---|---|--- 2024-09-27 14:12:39+00:00| seen| https://t.me/cvedetector/6495...
UBUNTU-CVE-2024-46859
In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF array with index values of 0 - SINFCURBRIGHT0x0d without checking that the SINF array is big enough...
SUSE-SU-2024:3425-1 Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-1504002488 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prpcreatetaggedframe bsc1225099. - CVE-2022-48662: Fixed a general protection fault GPF in i915perfopenioctl bsc1223521. - CVE-2024-35817...
Apple TV < 18 Multiple Vulnerabilities (121248)
According to its banner, the version of Apple TV on the remote device is prior to 18. It is therefore affected by multiple vulnerabilities as described in the 121248 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid207682; scriptversion"1.1";...
A week in security (September 16 – September 22)
Last week on Malwarebytes Labs: "Simply staggering" surveillance conducted by social media and streaming services, FTC finds Tor anonymity compromised by law enforcement. Is it still safe to use? Walmart customers scammed via fake shopping lists, threatened with arrest Snapchat wants to put your...
CVE-2024-9037
creationtimestamp| type| source ---|---|--- 2024-09-20 18:55:00+00:00| seen| https://t.me/cvedetector/6112...
Apple Safari Security Update (HT121241)
Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...
CVE-2023-41611
creationtimestamp| type| source ---|---|--- 2024-09-18 20:56:09+00:00| seen| https://t.me/cvedetector/6014...
CVE-2023-41610
creationtimestamp| type| source ---|---|--- 2024-09-18 20:56:05+00:00| seen| https://t.me/cvedetector/6013...
CVE-2024-46979
creationtimestamp| type| source ---|---|--- 2024-09-18 20:55:54+00:00| seen| https://t.me/cvedetector/6004...
CVE-2024-5958
creationtimestamp| type| source ---|---|--- 2024-09-18 17:35:16+00:00| seen| https://t.me/cvedetector/5987...
CVE-2024-46598
creationtimestamp| type| source ---|---|--- 2024-09-18 17:35:14+00:00| seen| https://t.me/cvedetector/5985...