408 matches found
GHSA-8GC2-VQ6M-RWJW Amazon Redshift Python Connector vulnerable to SQL Injection
Summary A SQL injection in the Amazon Redshift Python Connector in version 2.1.4 allows a user to gain escalated privileges via schema injection in the getschemas, gettables, or getcolumns Metadata APIs. Users should upgrade to the driver version 2.1.5 or revert to driver version 2.1.3. Impact A...
CVE-2024-12745 SQL Injection in the Amazon Redshift Python Connector affecting v2.1.4
A SQL injection in the Amazon Redshift Python Connector v2.1.4 allows a user to gain escalated privileges via the getschemas, gettables, or getcolumns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.5 or revert to driver version 2.1.3...
PT-2024-10194
Name of the Vulnerable Software and Affected Versions Amazon Redshift Python Connector version 2.1.4 Description A SQL injection in the Amazon Redshift Python Connector allows a user to gain escalated privileges via the get schemas, get tables, or get columns Metadata APIs. Recommendations For...
CVE-2023-41870
Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.5...
PT-2024-13003 · Themeum · Wp Crowdfunding
Name of the Vulnerable Software and Affected Versions: WP Crowdfunding versions 2.1.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in Themeum WP Crowdfunding, which allows exploiting incorrectly configured access control security levels. Recommendations:...
CVE-2024-53816
Missing Authorization vulnerability in Themeum Tutor LMS Elementor Addons tutor-lms-elementor-addons.This issue affects Tutor LMS Elementor Addons: from n/a through = 2.1.5...
CVE-2024-53816
Missing Authorization vulnerability in Themeum Tutor LMS Elementor Addons.This issue affects Tutor LMS Elementor Addons: from n/a through 2.1.5...
CVE-2024-53816
The CVE-2024-53816 entry concerns a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Tutor LMS Elementor Addons by Themeum, affecting versions up to 2.1.5. Multiple connected sources corroborate this, including Red Hat and CVE/CVELIST records, Patchstack entries...
PT-2024-35931 · Themeum · Tutor Lms Elementor Addons
Name of the Vulnerable Software and Affected Versions: Tutor LMS Elementor Addons versions 2.1.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in Themeum Tutor LMS Elementor Addons. Recommendations: For Tutor LMS Elementor Addons versions 2.1.5 and earlier...
WordPress plugin Tutor LMS Elementor Addons 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Tutor LMS Elementor Addons plugin <= 2.1.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Tutor LMS Elementor Addons versions = 2.1.5...
WordPress plugin Add Chat App Button 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
PT-2024-35329 · Udi Dollberg · Add Chat App Button
Name of the Vulnerable Software and Affected Versions: Udi Dollberg Add Chat App Button versions 2.1.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. This enables potentia...
WordPress plugin Tutor LMS Elementor Addons 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-16629 · WordPress · Tutor Lms Elementor Addons
Name of the Vulnerable Software and Affected Versions: Tutor LMS Elementor Addons plugin for WordPress versions up to, and including, 2.1.5 Description: The issue is related to a missing capability check on the install etlms dependency plugin function, allowing authenticated attackers with...
WordPress plugin uListing 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...
RHSA-2022:6277 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.5 security update
Bulletin has no description...
WordPress uListing Plugin <= 2.1.5 is vulnerable to Sensitive Data Exposure
Software uListing Type Plugin Vulnerable versions = 2.1.5 Fixed in 2.1.6 OWASP Top 10 A5: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-47344 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID ae4f1f1d6d26 Credits Joshua Chan Required privilege...
PT-2024-37860 · WordPress · Vform
Name of the Vulnerable Software and Affected Versions: VForm plugin for WordPress versions up to, and including, 2.1.5 Description: The VForm plugin for WordPress is affected by a Stored Cross-Site Scripting issue due to insufficient input sanitization and output escaping. This allows...
WordPress plugin Lifetime free Drag & Drop Contact Form Builder for WordPress VForm 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...