1733 matches found
OPENSUSE-SU-2024:10405-1 pam-1.3.0-3.4 on GA media
These are all security issues fixed in the pam-1.3.0-3.4 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11152-1 libpcp-devel-5.2.2-3.4 on GA media
These are all security issues fixed in the libpcp-devel-5.2.2-3.4 package on the GA media of openSUSE Tumbleweed...
Zscaler Client Connector 安全漏洞
Zscaler Client Connector is an application from zscaler. An application that is installed on a device to ensure that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A...
PT-2024-19885 · Zscaler · Zscaler Client Connector
Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector versions prior to 3.4 Description: An Improper Validation of Integrity Check Value issue in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary, removing client functionality...
CVE-2024-4017
Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...
BeyondTrust U-Series Appliance 安全漏洞
BeyondTrust U-Series Appliance is an application from BeyondTrust USA. A security vulnerability exists in BeyondTrust U-Series Appliance versions 3.4 through prior to 4.0.3 that stems from a mismanagement of privileges vulnerability in the filesystem module...
PT-2024-28795 · Beyondtrust · Beyondtrust U-Series Appliance
Name of the Vulnerable Software and Affected Versions: BeyondTrust U-Series Appliance versions 3.4 through 4.0.2 Description: The issue is related to Improper Privilege Management in the BeyondTrust U-Series Appliance on Windows, 64-bit, specifically affecting the filesystem modules. This allows...
PT-2024-24632 · WordPress · Wp Poll Maker
Name of the Vulnerable Software and Affected Versions: WP Poll Maker versions 3.4 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the WP Poll Maker plugin. This could potentially allow for malicious file uploads. Recommendations:...
WordPress Plugin WP Poll Maker 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...
WordPress WP Poll Maker Plugin <= 3.4 is vulnerable to Arbitrary File Upload
Software WP Poll Maker Type Plugin Vulnerable versions = 3.4 Fixed in 3.5 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-32514 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 5f238f52b673 Credits Yudistira Arya Required privilege Subscriber...
CVE-2020-36828
CVE-2020-36828 (DiscuzX) affects DiscuzX up to version 3.4-20200818. The vulnerability is in the function show_next_step of the file upload/install/include/install_function.php, where manipulation of the uchidden argument enables cross-site scripting. The issue can be exploited remotely. A fixed ...
PT-2024-10839 · Discuzx · Discuzx
Name of the Vulnerable Software and Affected Versions: DiscuzX versions up to 3.4-20200818 Description: A problematic issue was found in the function show next step of the file upload/install/include/install function.php. The manipulation of the argument uchidden leads to cross-site scripting. It...
Discuz! X 跨站脚本漏洞
Discuz! X is a forum platform. A cross-site scripting vulnerability exists in version 3.4-20200818 and prior versions of Discuz! X. The vulnerability stems from the fact that incorrect manipulation of the uchidden parameter can lead to cross-site scripting...
WordPress WP Poll Maker Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)
Software WP Poll Maker Type Plugin Vulnerable versions = 3.1 Fixed in 3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29818 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID bde676e2b02e Credits Dhabaleshwar Das Required privilege...
WordPress Scalable Vector Graphics (SVG) Plugin <= 3.4 is vulnerable to Cross Site Scripting (XSS)
Software Scalable Vector Graphics SVG Type Plugin Vulnerable versions = 3.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-7085 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 893df7114366 Credits Bob Matyas...
PT-2024-15207 · WordPress · Scalable Vector Graphics
Name of the Vulnerable Software and Affected Versions: Scalable Vector Graphics SVG WordPress plugin versions through 3.4 Description: The issue arises from the Scalable Vector Graphics SVG WordPress plugin's failure to sanitize uploaded SVG files. This could allow users with a role as low as...
OracleVM 3.4 : kernel-uek (OVMSA-2024-0003)
The remote OracleVM system is missing necessary patches to address security updates: - An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service panic because inputsetcapability mishandles the situation in which an event code...
CVE-2024-24512
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component...
