CVE-2024-32107

Cross-Site Request Forgery CSRF vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0...

CVE-2024-32107

CVE-2024-32107 is a CSRF vulnerability in Finale Lite – Sales Countdown Timer & Discount for WooCommerce (Finale Lite) affecting versions up to 2.18.0. The issue has a CVSS v3.1 base score of 4.3 (Medium) with network attack vector, low attack complexity, and user interaction required. Remediatio...

PT-2024-24413

Name of the Vulnerable Software and Affected Versions XLPlugins Finale Lite versions 2.18.0 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

WordPress Finale Lite Plugin <= 2.18.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Finale Lite Type Plugin Vulnerable versions = 2.18.0 Fixed in 2.18.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32107 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b5e4e81a20d3 Credits Dhabaleshwar Das...

SUSE-SU-2020:2606-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus to version 2.18.0 fixes the following issues: - Fixed some building issues bsc1175478 - prometheus components systemd units should depend on network target bsc1143913. Update to 2.18.0 + Features Tracing: Added experimental Jaeger support 7148 +...

Unsafe Dependency Resolution

Overview org.eclipse.xtext:org.eclipse.xtext.maven.parent is a framework for development of programming languages and domain-specific languages. Affected versions of this package are vulnerable to Unsafe Dependency Resolution due to resolving dependencies over an insecure channel http. If the bui...

Information disclosure

Cloud Foundry Bits Service, versions prior to 2.18.0, includes an information disclosure vulnerability. A remote malicious user may execute a timing attack to brute-force the signing key, allowing them complete read and write access to the the Bits Service storage...

CVE-2018-15800: Timing attack allows extraction of signing key in Bits Service | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions Bits Service release versions prior to 2.18.0 Description Cloud Foundry Bits Service, versions prior to 2.18.0, includes an information disclosure vulnerability. A remote malicious user may execute a timing...

Security update for webkit2gtk3 (important)

This update for webkit2gtk3 to version 2.18.0 fixes the following issues: These security issues were fixed: - CVE-2017-7039: An issue was fixed that allowed remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site...