WordPress Helloprint plugin <= 2.0.4 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Helloprint versions = 2.0.4...

Drupal OhDear Integration module < 2.0.4 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by casey in WordPress Module OhDear Integration versions 2.0.4...

PT-2025-2105 · Drupal · Ohdear Integration

Name of the Vulnerable Software and Affected Versions: OhDear Integration versions 0.0.0 through 2.0.3 Description: The issue is related to incorrect authorization in the OhDear Integration module for Drupal, allowing forceful browsing. This can enable a remote attacker to access confidential...

PT-2024-33367 · Unknown · Harpreet Singh Ajax Custom Css/Js

Name of the Vulnerable Software and Affected Versions: Harpreet Singh Ajax Custom CSS/JS versions n/a through 2.0.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

CVE-2019-25214

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating...

VulnCheck KEV: CVE-2019-25214

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as...

GHSA-QJRV-V6QP-X99X SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings

The error rendering code from the parser would panic when handling failed parsing of queries where the error occurred when converting an empty string to a SurrealDB value. This would be the case when casting an empty string to a record, duration or datetime, as well as potentially when parsing an...

RHSA-2021:1538 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.4 security update

Bulletin has no description...

WordPress Widgets for WooCommerce Products on Elementor plugin <= 2.0.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Woo Products Widgets For Elementor versions = 2.0.4...

CVE-2024-38701

Authorization Bypass Through User-Controlled Key vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 2.0.4...

WordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by filime Patchstack Alliance in WordPress Plugin Academy LMS versions = 2.0.4...

WordPress Academy LMS Plugin <= 2.0.4 is vulnerable to Broken Access Control

Software Academy LMS Type Plugin Vulnerable versions = 2.0.4 Fixed in 2.0.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38701 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1381c0d8b2d7 Credits filime Required privilege Academy...

PT-2024-27640 · Wpdevart · Wpdevart Responsive Image Gallery

Name of the Vulnerable Software and Affected Versions: WpDevArt Responsive Image Gallery, Gallery Album versions through 2.0.3 Description: The issue is related to a Missing Authorization vulnerability in WpDevArt Responsive Image Gallery, Gallery Album. Recommendations: For versions through 2.0....

WordPress Basil Theme <= 2.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Basil Type Theme Vulnerable versions = 2.0.4 Fixed in 2.0.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-39310 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 604f7a92c550 Credits Unknown Required privilege...

CVE-2024-38322

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 agent username and password error response discrepancy exposes product to brute force enumeration. IBM X-Force ID: 294869...

PT-2024-27943 · Ibm · Ibm Storage Defender - Resiliency Service

Name of the Vulnerable Software and Affected Versions: IBM Storage Defender - Resiliency Service versions 2.0.0 through 2.0.4 Description: The issue is related to an agent username and password error response discrepancy, which exposes the product to brute force enumeration. Recommendations: For...

aaa-ml-datasets-course (=1.0.0), addownloader (>=0.2.3 <=0.2.12) +681 more potentially affected by CVE-2024-39705 via nltk (>=2.0.4 <=3.8.1)

nltk PYPI version =2.0.4, =0.2.3, =0.2.0, =0.0.1, =0.1.0, =0.0.9, =0.17.0, =0.0.1rc1, =0.1.0, =6.1.0, =6.1.4 and more Source cves: CVE-2024-39705 Source advisory: OSV:PYSEC-2024-167...

CVE-2024-28820

Buffer overflow in the extractopenvpncr function in openvpn-cr.c in openvpn-auth-ldap aka the Three Rings Auth-LDAP plugin for OpenVPN 2.0.4 allows attackers with a valid LDAP username and who can control the challenge/response password field to pass a string with more than 14 colons into this...

PT-2024-22590 · Unknown +1 · Openvpn-Auth-Ldap +1

Name of the Vulnerable Software and Affected Versions: openvpn-auth-ldap version 2.0.4 Description: The issue is a buffer overflow in the extract openvpn cr function in openvpn-cr.c that allows attackers with a valid LDAP username and control over the challenge/response password field to cause a...

PT-2024-27160 · Totolink · Totolink Cp300+

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP300 version 2.0.4-B20201102 Description: A hardcoded password vulnerability was discovered in /etc/shadow.sample, allowing attackers to log in as root. This issue enables unauthorized access to the system. Recommendations: For...