236 matches found
PT-2025-4370
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.8 Description: A critical issue was identified in the "/WeGIA/html/socio/sistema/controller/controla xlsx.php" endpoint, which accepts file uploads without proper validation. This allows the upload of malicious...
WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Hakiduck Patchstack Alliance in WordPress Plugin Ni WooCommerce Cost Of Goods versions = 3.2.8...
CVE-2024-47314
Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.2.8...
PT-2024-32526 · WordPress · Wp Sunshine Sunshine Photo Cart
Name of the Vulnerable Software and Affected Versions: WP Sunshine Sunshine Photo Cart versions 3.2.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For WP...
CVE-2024-42930
PbootCMS 3.2.8 is vulnerable to URL Redirect...
CVE-2024-42930
PbootCMS 3.2.8 is vulnerable to URL Redirect...
PbootCMS 安全漏洞
PbootCMS is a PbootCMS open source content management system CMS for building websites for open source businesses developed using the PHP language. A security vulnerability exists in PbootCMS version 3.2.8, which stems from vulnerability to URL redirection...
CVE-2024-42930
PbootCMS 3.2.8 is affected by a URL redirect vulnerability. The CVE-2024-42930 entry identifies PbootCMS 3.2.8 as vulnerable to URL redirection. No exploit details or vectors are provided in the connected documents. Remediation information (e.g., patched version) is not included in the supplied c...
CVE-2024-42930
PbootCMS 3.2.8 is vulnerable to URL Redirect...
WordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Sunshine Photo Cart versions = 3.2.8...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in rexml-3.2.8
Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of rexml-3.2.8 Vulnerability Details CVEID:CVE-2024-39908 DESCRIPTION: Ruby REXML is vulnerable to a denial of service, caused by an uncontrolled resource consumption flaw. By sending a specially crafted request...
CVE-2024-40636 Basic Auth Credential Leakage to Logs After Fetch Registry Error in Steeltoe.Discovery.Eureka with Peer Awareness
Steeltoe is an open source project that provides a collection of libraries that helps users build production-grade cloud-native applications using externalized configuration, service discovery, distributed tracing, application management, and more. When utilizing multiple Eureka server service UR...
Insertion of Sensitive Information into Log File
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File when utilizing multiple Eureka server service URLs with basic auth and encountering an issue with fetching the service registry. An attacker can gain access to credentials by examining th...
WordPress Nested Pages Plugin <= 3.2.7 is vulnerable to Cross Site Request Forgery (CSRF)
Software Nested Pages Type Plugin Vulnerable versions = 3.2.7 Fixed in 3.2.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-5943 Patch priority Low CVSS severity Low 8.3 Developer Claim ownership PSID ec525e948d0f Credits Bassem Essam Required...
AZL-42064 CVE-2024-35176 affecting package rubygem-rexml for versions less than 3.2.8-1
REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this...
Xfig 安全漏洞
Xfig is a charting tool. Utility program for converting XFig graphic files. A security vulnerability exists in Xfig version v3.2.8, which stems from a NULL pointer dereference vulnerability that was found to be included in a call to XGetWMHints...
PT-2024-13302 · Xfig +2 · Xfig +2
Name of the Vulnerable Software and Affected Versions: Xfig version 3.2.8 Description: A NULL pointer dereference issue was discovered when calling the XGetWMHints function. This issue is disputed as it is not expected for an X application to continue running with arbitrary anomalous behavior fro...
CVE-2024-25597
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Etoile Web Design Ultimate Reviews allows Stored XSS.This issue affects Ultimate Reviews: from n/a through 3.2.8...
PT-2024-21027 · Unknown · Etoile Web Design Ultimate Reviews
Name of the Vulnerable Software and Affected Versions: Etoile Web Design Ultimate Reviews versions through 3.2.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to...