CVE-2023-51680

Missing Authorization vulnerability in TechnoVama Quotes for WooCommerce.This issue affects Quotes for WooCommerce: from n/a through 2.0.1...

CVE-2023-51680

Missing Authorization vulnerability in TechnoVama Quotes for WooCommerce.This issue affects Quotes for WooCommerce: from n/a through 2.0.1...

[SECURITY] Fedora 40 Update: rust-silver-2.0.1-8.fc40

A cross-shell customizable powerline-like prompt with icons...

WordPress Kognetiks Chatbot for WordPress Plugin <= 2.0.0 is vulnerable to Arbitrary File Upload

Software Kognetiks Chatbot for WordPress Type Plugin Vulnerable versions = 2.0.0 Fixed in 2.0.1 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-32700 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 4fb22828865e Credits LVT-tholv2k Required...

PT-2024-4071

Name of the Vulnerable Software and Affected Versions: ip package versions through 2.0.1 for Node.js Description: The issue is related to the improper categorization of certain IP addresses as globally routable via the isPublic function, which might allow Server-Side Request Forgery SSRF attacks...

owO: thunderbird security update

115.10.0-2.0.1 - Add Oracle prefs - Add OpenELA debranding 115.10.0-2 - Update to 115.10.0 build2 115.10.0-1 - Update to 115.10.0 build1 - Revert expat CVE-2023-52425 fix...

thunderbird security update

115.10.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 115.10.0-2 - Update to 115.10.0 build2 115.10.0-1 - Update to 115.10.0 build1 - Revert expat CVE-2023-52425 fix...

thunderbird security update

115.10.0-2.0.1 - Add Oracle prefs 115.10.0 - Add OpenELA debranding 115.10.0-2 - Update to 115.10.0 build2 115.10.0-1 - Update to 115.10.0 build1 - Revert expat CVE-2023-52425 fix...

CVE-2024-3928

CVE-2024-3928 affects Dromara open-capacity-platform 2.0.1, specifically the auth-server exposes an information-disclosure vulnerability via the /actuator/heapdump endpoint. Root cause is an information disclosure pathway in that file/endpoint. The vulnerability is exploitable remotely, and publi...

Dromara open-capacity-platform 信息泄露漏洞

Dromara open-capacity-platform is a microservices capacity open platform from Dromara. An information disclosure vulnerability exists in Dromara open-capacity-platform version 2.0.1, which stems from an information disclosure vulnerability in file/actuator/heapdump...

WordPress Void Elementor WHMCS Elements For Elementor Page Builder Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Void Elementor WHMCS Elements For Elementor Page Builder Type Plugin Vulnerable versions = 2.0 Fixed in 2.0.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32592 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8da009f2807a Credits...

PopojiCMS Version 2.0.1 - Remote Command Execution

Exploit Title: PopojiCMS Version : 2.0.1 Remote Command Execution Date: 27/11/2023 Exploit Author: tmrswrr Vendor Homepage: https://www.popojicms.org/ Software Link: https://github.com/PopojiCMS/PopojiCMS/archive/refs/tags/v2.0.1.zip Version: Version : 2.0.1 Tested on:...

CVE-2024-31361

CVE-2024-31361 is a stored XSS vulnerability in the bunny.net WordPress CDN Plugin that affects versions up to 2.0.1. The CVE description cites improper input neutralization during web page generation leading to stored cross-site scripting. The CVSSv3.1 vector is CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/...

WordPress bunny.net Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software bunny.net Type Plugin Vulnerable versions = 2.0.1 Fixed in 2.0.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31361 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID eecba96cff40 Credits Joshua Chan Required privilege Administrator...

PT-2024-23461 · Builderall · Builderall Builder For Wordpress

Name of the Vulnerable Software and Affected Versions: Builderall Builder for WordPress versions n/a through 2.0.1 Description: A Server-Side Request Forgery SSRF issue affects Builderall Team Builderall Builder for WordPress. This issue allows for unauthorized requests to be made from the server...

PT-2024-23446 · Unknown · Lordicon Animated Icons

Name of the Vulnerable Software and Affected Versions: Lordicon Animated Icons versions through 2.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...

PT-2024-23059 · Cartflows · The Funnel Builder By Cartflows

Name of the Vulnerable Software and Affected Versions: Funnel Builder by CartFlows versions 2.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations:...

BIT-TENSORFLOW-2020-5215 Segmentation faultin TensorFlow when converting a Python string to tf.float16

In TensorFlow before 1.15.2 and 2.0.1, converting a string from Python to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker c...

Grouptime Teamwire Client Security Vulnerability

Grouptime Teamwire Client is an enterprise messaging client application from Grouptime Germany. A security vulnerability exists in Grouptime Teamwire Client versions v.2.0.1 through v.2.4.0. A remote attacker could exploit the vulnerability to obtain sensitive information via a specially crafted...

Grouptime Teamwire Client Security Vulnerability

Grouptime Teamwire Client is an enterprise messaging client application from Grouptime Germany. A security vulnerability exists in Grouptime Teamwire Client versions v.2.0.1 through v.2.4.0. A remote attacker could exploit the vulnerability to obtain sensitive information via a specially crafted...