328 matches found
PT-2023-7474 · Ubiquiti · Ubiquiti Edgerouter X
Name of the Vulnerable Software and Affected Versions: Ubiquiti EdgeRouter X version 2.0.9-hotfix.6 Description: A critical issue has been found in the OSPF Handler component of the software, potentially allowing for command injection through the manipulation of the argument area. This can be...
PT-2023-7473 · Ubiquiti · Ubiquiti Edgerouter X
Name of the Vulnerable Software and Affected Versions: Ubiquiti EdgeRouter X version 2.0.9-hotfix.6 Description: The issue exists due to insufficient input validation in the NAT Configuration Handler component of the Ubiquiti EdgeRouter's firmware, potentially allowing a remote attacker to execut...
PT-2023-20299 · WordPress · Second2None Service Area Postcode Checker
Name of the Vulnerable Software and Affected Versions: Second2none Service Area Postcode Checker plugin versions prior to 2.0.9 Description: The issue is related to an authentication vulnerability that affects users with admin+ privileges in the Second2none Service Area Postcode Checker plugin...
CVE-2022-46392 affecting package fluent-bit for versions less than 2.0.9-1
CVE-2022-46392 affecting package fluent-bit for versions less than 2.0.9-1. An upgraded version of the package is available that resolves this issue...
SUSE CVE-2019-7578
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c...
SUSE CVE-2019-7636
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDLGetRGB in video/SDLpixels.c...
SUSE CVE-2019-12221
An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9 when used in conjunction with libSDL2image.a in SDL2image 2.0.4. There is a SEGV in the SDL function SDLfreeREAL at stdlib/SDLmalloc.c...
WordPress Extensions For CF7 Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)
Software Extensions For CF7 Type Plugin Vulnerable versions = 2.0.8 Fixed in 2.0.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23899 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0538927ff62d Credits István Márton...
CVE-2022-4589 cyface Terms and Conditions Module views.py returnTo redirect
A vulnerability has been found in cyface Terms and Conditions Module up to 2.0.9 and classified as problematic. Affected by this vulnerability is the function returnTo of the file termsandconditions/views.py. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading ...
AZL-12968 CVE-2022-46392 affecting package fluent-bit for versions less than 2.0.9-1
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses typically, an untrusted operating system attacking a secure enclave can recover an RSA private key after observing the victim performing a single...
CVE-2022-43553
A remote code execution vulnerability in EdgeRouters Version 2.0.9-hotfix.4 and earlier allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later...
PT-2022-26961 · Ubiquiti · Edgerouters
Name of the Vulnerable Software and Affected Versions: EdgeRouters versions 2.0.9-hotfix.4 and earlier Description: A remote code execution issue allows a malicious actor with an operator account to run arbitrary administrator commands. This issue is fixed in Version 2.0.9-hotfix.5 and later...
PT-2022-25279 · WordPress · Wpforo Forum
Name of the Vulnerable Software and Affected Versions: wpForo Forum plugin versions prior to 2.0.9 Description: The issue is related to an Arbitrary File Upload vulnerability that affects authenticated subscribers and above in the wpForo Forum plugin on WordPress. Recommendations: For wpForo Foru...
WordPress plugin wpForo Forum 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
PT-2022-25273 · WordPress · Wpforo Forum
Name of the Vulnerable Software and Affected Versions: wpForo Forum plugin versions prior to 2.0.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
CVE-2022-37342 WordPress Add Shortcodes Actions And Filters plugin <= 2.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability Add Shortcodes Actions And Filters plugin = 2.0.9 at WordPress...
PT-2022-23936 · WordPress · Add Shortcodes Actions/Filters
Name of the Vulnerable Software and Affected Versions: Add Shortcodes Actions And Filters plugin version 2.0.9 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can inject...
PT-2022-8581 · Unknown · Net::Ldaps +1
Name of the Vulnerable Software and Affected Versions: LemonLDAP::NG versions prior to 2.0.9 Description: The issue concerns the validity of X.509 certificates not being checked by default when connecting to remote LDAP backends. This is due to the default configuration of the Net::LDAPS module f...
