PT-2024-36267 · Dotstore · Dotstore Advance Menu Manager

Name of the Vulnerable Software and Affected Versions: Dotstore Advance Menu Manager versions 3.1.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Dotstore Advance Menu Manager. This vulnerability allows for unauthorized access. Recommendations: For...

WordPress plugin Advance Menu Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerability

Settings Change vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Advance Menu Manager versions = 3.1.1...

WordPress Leopard plugin <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Options Update vulnerability discovered by Tonn in WordPress Plugin Leopard - WordPress offload media versions = 3.1.1...

openexr security update

3.1.1-2.1 - fix CVE-2023-5481 RHEL-64162...

CVE-2024-10589

The Leopard - WordPress Offload Media plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the importsettings function in all versions up to, and including, 3.1.1. This makes it possible for authenticate...

PT-2024-16387 · WordPress · Leopard - Wordpress Offload Media

Name of the Vulnerable Software and Affected Versions: Leopard - WordPress Offload Media plugin versions up to, and including, 3.1.1 Description: The issue allows unauthorized modification of data, leading to privilege escalation due to a missing capability check on the import settings function...

CVE-2024-43799 affecting package reaper for versions less than 3.1.1-13

CVE-2024-43799 affecting package reaper for versions less than 3.1.1-13. A patched version of the package is available...

CVE-2024-45296 affecting package reaper for versions less than 3.1.1-13

CVE-2024-45296 affecting package reaper for versions less than 3.1.1-13. A patched version of the package is available...

CVE-2024-48949 affecting package reaper for versions less than 3.1.1-13

CVE-2024-48949 affecting package reaper for versions less than 3.1.1-13. A patched version of the package is available...

CVE-2024-47764 affecting package reaper for versions less than 3.1.1-13

CVE-2024-47764 affecting package reaper for versions less than 3.1.1-13. A patched version of the package is available...

CVE-2024-45590 affecting package reaper for versions less than 3.1.1-13

CVE-2024-45590 affecting package reaper for versions less than 3.1.1-13. A patched version of the package is available...

CVE-2024-43796 affecting package reaper for versions less than 3.1.1-12

CVE-2024-43796 affecting package reaper for versions less than 3.1.1-12. A patched version of the package is available...

AZL-50322 CVE-2024-48949 affecting package reaper for versions less than 3.1.1-13

The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S.gtesig.eddsa.curve.n || sig.S.isNeg" validation...

AZL-49740 CVE-2024-42861 affecting package linuxptp for versions less than 3.1.1-1

An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafted PdelayReq message to the time synchronization function...

AZL-49123 CVE-2024-43799 affecting package reaper for versions less than 3.1.1-13

Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...

OPENSUSE-SU-2024:14306-1 389-ds-3.1.1~git13.a9c7ff9-1.1 on GA media

These are all security issues fixed in the 389-ds-3.1.1git13.a9c7ff9-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-42461 affecting package reaper for versions less than 3.1.1-11

CVE-2024-42461 affecting package reaper for versions less than 3.1.1-11. A patched version of the package is available...

CVE-2024-42459 affecting package reaper for versions less than 3.1.1-11

CVE-2024-42459 affecting package reaper for versions less than 3.1.1-11. A patched version of the package is available...

Dolibarr ERP/CRM Login Utility

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Dolibarr ERP/CRM Login Utility', 'Description' = %q This module attempts to authenticate to a Dolibarr ERP/CRM's admin web interface, and should...