89 matches found
CVE-2025-8361 Config Pages - Moderately critical - Access bypass - SA-CONTRIB-2025-093
Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing. This issue affects Config Pages: from 0.0.0 before 2.18.0...
Drupal Config Pages 安全漏洞
Drupal Config Pages is a configuration page plugin for the Drupal community. A security vulnerability exists in Drupal Config Pages versions prior to 2.18.0, which stems from a lack of authorization and could lead to forced browsing...
PT-2025-33498 · Drupal · Drupal Config Pages
Name of the Vulnerable Software and Affected Versions: Drupal Config Pages versions 0.0.0 through 2.17.9 Description: Missing authorization allows forceful browsing of Config Pages. Recommendations: Update to version 2.18.0 or later...
CVE-2024-45393
Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account can access webhook delivery information for any webhook registered on the CVAT instance, including that of other users. For each delivery, this contains...
CVE-2025-46226
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ferranfg MPL-Publisher mpl-publisher allows Stored XSS.This issue affects MPL-Publisher: from n/a through = 2.18.0...
WordPress plugin MPL-Publisher 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
CVE-2025-32178
Missing Authorization vulnerability in 6Storage 6Storage Rentals 6storage-rentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 6Storage Rentals: from n/a through = 2.22.0...
CVE-2025-30885
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bit Apps Bit Form bit-form allows Phishing.This issue affects Bit Form: from n/a through = 2.18.0...
CVE-2025-30885
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bit Apps Bit Form bit-form allows Phishing.This issue affects Bit Form: from n/a through = 2.18.0...
CVE-2025-30885
CVE-2025-30885 is an Open Redirect vulnerability in Bit Form – Contact Form Plugin for WordPress. The WordPress plugin Bit Form <= 2.18.0 is affected, enabling phishing via malicious redirects. The issue is tracked in CVE-2025-30885 and is listed as patched for Bit Form
WordPress Finale Lite 2.18.0 Missing Authorization
WordPress Finale Lite plugin versions 2.18.0 and below missing authorization proof of concept exploit that allows an attacker to install and activate arbitrary plugins...
PT-2024-39845 · Zowe · Zowe
Name of the Vulnerable Software and Affected Versions: Zowe versions 1.0.0 through 1.28.8 Zowe versions 2.0.0 through 2.18.0 Description: The health endpoint is public, allowing everybody to see a list of all services, which is potentially valuable information for attackers. Recommendations: For...
PT-2024-31597 · Unknown · Computer Vision Annotation Tool
Name of the Vulnerable Software and Affected Versions: Computer Vision Annotation Tool CVAT versions prior to 2.18.0 Description: The Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account can access webhook...
CVE-2024-7106
A vulnerability classified as problematic was found in Spina CMS 2.18.0. Affected by this vulnerability is an unknown functionality of the file /admin/mediafolders. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the...
CVE-2024-7106
CVE-2024-7106 affects Spina CMS 2.18.0, in the /admin/media_folders functionality. The issue is a cross-site request forgery (CSRF) in an unknown, user-influenced function that can be triggered remotely. Impact is described as possible manipulation with high severity, though exact exploit details...
Spina 跨站请求伪造漏洞
Spina is an easy-to-use CMS from SpinaCMS open source. A cross-site request forgery vulnerability exists in Spina version 2.18.0 and earlier versions. An attacker could exploit this vulnerability to perform a cross-site request forgery attack...
PT-2024-29459 · Spina Cms · Spina Cms
Name of the Vulnerable Software and Affected Versions: Spina CMS versions 2.18.0 and earlier Description: The issue allows a remote attacker to escalate privileges via a crafted URL. This is related to a Cross Site Request Forgery vulnerability. Recommendations: For Spina CMS versions 2.18.0 and...
PT-2024-29460 · Spina Cms · Spina Cms
Name of the Vulnerable Software and Affected Versions: Spina CMS version 2.18.0 Description: A Cross-Site Request Forgery CSRF issue was found in Spina CMS. The issue is related to the API endpoint "/admin/layout". Recommendations: For Spina CMS version 2.18.0, as a temporary workaround, consider...
Debian dla-3845 : dlt-daemon - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3845 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3845-1 [email protected]...
