1234 matches found
PT-2024-16307 · Linzhaoguan · Linzhaoguan Pb-Cms
Name of the Vulnerable Software and Affected Versions: LinZhaoguan pb-cms versions up to 2.0.1 Description: A problematic issue was found in the Theme Management Module of the affected software, specifically in an unknown function of the file /adminthemes. This issue leads to cross-site scripting...
firefox security update
128.3.1-2.0.1 - Update to 128.3.1 Orabug: 37168934...
WordPress plugin Bulk images optimizer 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Bulk images optimizer plugin <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update vulnerability
Missing Authorization to Authenticated Subscriber+ Plugin Options Update vulnerability discovered by Francesco Carlucci in WordPress Plugin Bulk images optimizer versions = 2.0.1...
WordPress plugin Top Bar – PopUps 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Top Bar - PopUps A path...
WordPress AADMY plugin <= 2.0.1 - Unauthenticated Arbitrary Shortcode Execution vulnerability
Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Francesco Carlucci in WordPress Plugin AADMY versions = 2.0.1...
PT-2024-39877 · WordPress · Aadmy – Add Auto Date Month Year Into Posts
Name of the Vulnerable Software and Affected Versions: The AADMY – Add Auto Date Month Year Into Posts plugin for WordPress versions up to, and including, 2.0.1 Description: The issue is related to arbitrary shortcode execution due to the software allowing users to execute an action that does not...
PT-2024-32700 · Keap · Keap Official Opt-In Forms
Name of the Vulnerable Software and Affected Versions: Keap Official Opt-in Forms versions prior to 2.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations:...
WordPress plugin Keap Official Opt-in Forms 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...
Apple Security Update: visionOS 2.0.1
Apple recommends to install security update visionOS 2.0.1 on devices Apple Vision Pro...
WordPress plugin Demo Importer Plus 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...
CVE-2024-47534
A flaw was found in the go-tuf package. Due to incorrect delegation lookups, the go-tuf client inconsistently traces the delegations. For example, if targets delegate to "A", and then to "B", and "B" delegates to "C", then the client should trace the delegations in the order "A", then "B", then...
CVE-2024-47534
go-tuf is a Go implementation of The Update Framework TUF. The go-tuf client inconsistently traces the delegations. For example, if targets delegate to "A", and to "B", and "B" delegates to "C", then the client should trace the delegations in the order "A" then "B" then "C" but it may incorrectly...
CVE-2024-47534
go-tuf is a Go implementation of The Update Framework TUF. The go-tuf client inconsistently traces the delegations. For example, if targets delegate to "A", and to "B", and "B" delegates to "C", then the client should trace the delegations in the order "A" then "B" then "C" but it may incorrectly...
CVE-2024-47534
CVE-2024-47534 affects the go-tuf Go TUF client. The root cause is incorrect delegation tracing: when targets delegate to A and B, and B delegates to C, the client may traverse B→C→A instead of A→B→C, due to the way GetRolesForTarget maps are handled in metadata.go. This can cause the client to t...
PT-2024-32647 · Go-Tuf +1 · Go-Tuf +1
Name of the Vulnerable Software and Affected Versions: go-tuf versions prior to 2.0.1 Description: The go-tuf client inconsistently traces the delegations, which can result in downloading the wrong artifact. For example, if targets delegate to "A" and "B", and "B" delegates to "C", the client...
WordPress plugin Contact Form 7 Math Captcha 安全漏洞
WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin...
PT-2024-31643 · Peter Hardy Vandoorn · Maintenance Redirect
Name of the Vulnerable Software and Affected Versions: Peter Hardy-vanDoorn Maintenance Redirect versions n/a through 2.0.1 Description: The issue is related to an Authentication Bypass by Spoofing vulnerability, which allows accessing functionality not properly constrained by ACLs. This enables...
WordPress Maintenance Redirect plugin <= 2.0.1 - IP Bypass vulnerability
IP Bypass vulnerability discovered by LeNgocHoa Patchstack Alliance in WordPress Plugin Maintenance Redirect versions = 2.0.1...
