539 matches found
Drupal Email Contact module < 2.0.4 - Unauthenticated Broken Access Control vulnerability
Unauthenticated Broken Access Control vulnerability discovered by Claudiu Cristea in WordPress Module Email Contact versions 2.0.4...
Shanghai Sunfull Automation BACnet Server HMI1002-ARM 安全漏洞
The Shanghai Sunfull Automation BACnet Server HMI1002-ARM is a WEB configuration gateway from Shanghai Sunfull in China. A security vulnerability exists in the Shanghai Sunfull Automation BACnet Server HMI1002-ARM version 2.0.4, which is caused by a buffer overflow...
PT-2024-29106 · WordPress · Tabellen Von Faustball.Com
Name of the Vulnerable Software and Affected Versions: The Tabellen von faustball.com plugin for WordPress versions up to, and including, 2.0.4 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allo...
CVE-2024-33270
An issue in FME Modules fileuploads v.2.0.3 and before and fixed in v2.0.4 allows a remote attacker to obtain sensitive information via the uploadfiles.php component...
WordPress Tabellen von faustball.com plugin <= 2.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by Benedictus Jovan in WordPress Plugin Tabellen von faustball.com versions = 2.0.4...
CVE-2024-26307
Possible race condition vulnerability in Apache Doris. Some of code using chmod method. This method run the risk of someone renaming the file out from under user and chmodding the wrong file. This could theoretically happen, but the impact would be minimal. This issue affects Apache Doris: before...
CVE-2024-26307
CVE-2024-26307 describes a race condition in Apache Doris involving code that uses chmod(), which could allow a local attacker to rename a file under a user and chmod the wrong file. Affected versions are before 1.2.8 and before 2.0.4. Impact is described as minimal in the sources. The recommende...
CVE-2024-27307 JSONata expression can pollute the "Object" prototype
JSONata is a JSON query and transformation language. Starting in version 1.4.0 and prior to version 1.8.7 and 2.0.4, a malicious expression can use the transform operator to override properties on the Object constructor and prototype. This may lead to denial of service, remote code execution or...
CVE-2024-27307 JSONata expression can pollute the "Object" prototype
JSONata is a JSON query and transformation language. Starting in version 1.4.0 and prior to version 1.8.7 and 2.0.4, a malicious expression can use the transform operator to override properties on the Object constructor and prototype. This may lead to denial of service, remote code execution or...
BIT-TENSORFLOW-2020-26271 Heap out of bounds access in MakeEdge in TensorFlow
In affected versions of TensorFlow under certain cases, loading a saved model can result in accessing uninitialized memory while building the computation graph. The MakeEdge function creates an edge between one output tensor of the src node given by outputindex and the input slot of the dst node...
JSONata Security Vulnerabilities
JSONata is a JSON query and transformation language. A security vulnerability exists in JSONata versions 1.4.0 through prior to 2.0.4, which stems from a malicious expression that can override attributes on object constructors and prototypes using conversion operators, which could result in a...
CVE-2023-46350
SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" idxrmanufacturer module for PrestaShop versions 2.0.4 and before, allows remote attackers to escalate privileges and obtain sensitive information via the methods IdxrmanufacturerFunctions::getCornersLink,...
CVE-2023-6963
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to bypass the Captcha Verification of the Contact Form block by omitting 'g-recaptcha-response' from the 'data' array...
PT-2024-15145 · WordPress · Getwid
Name of the Vulnerable Software and Affected Versions: Getwid – Gutenberg Blocks plugin for WordPress versions up to, and including, 2.0.4 Description: The issue allows unauthenticated attackers to bypass the Captcha Verification of the Contact Form block by omitting the g-recaptcha-response from...
PT-2024-15142 · WordPress · Getwid
Name of the Vulnerable Software and Affected Versions: Getwid – Gutenberg Blocks plugin for WordPress versions prior to 2.0.4 Description: The issue allows unauthorized modification of data due to a missing capability check on the recaptcha api key manage function. This makes it possible for...
WordPress Getwid – Gutenberg Blocks Plugin <= 2.0.4 is vulnerable to Bypass Vulnerability
Software Getwid – Gutenberg Blocks Type Plugin Vulnerable versions = 2.0.4 Fixed in 2.0.5 OWASP Top 10 A1: Broken Access Control Classification Bypass Vulnerability CVE CVE-2023-6963 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID cbf13618cdfb Credits Lucio Sá Required...
WordPress Plugin PlusCaptcha Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
Microweber File Upload Vulnerability (CNVD-2023-9820348)
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A file upload vulnerability exists in Microweber version v.2.0.4, which stems from the...