595 matches found
SUSE CVE-2023-28999
Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Nextcloud iOS app 3.0.5 until 4.8.0, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files,...
Amazon Linux 2 : python38 (ALASPYTHON3.8-2024-011)
The version of python38 installed on the remote host is prior to 3.8.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2PYTHON3.8-2024-011 advisory. An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, a...
Important: python38
Issue Overview: An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can r...
Fedora 40 : python3.8 (2023-c69d73674a)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c69d73674a advisory. Automatic update for python3.8-3.8.18-3.fc40. Changelog Mon Dec 18 2023 Lumr Balhar - 3.8.18-3 - Security fix for CVE-2023-27043 rhbz2196193 Tenable has...
WordPress plugin Login as User or Customer 授权问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An authorization issue vulnerability exists in...
PT-2024-14143 · WordPress · Wp-Buy Login As User/Customer
Name of the Vulnerable Software and Affected Versions: wp-buy Login as User or Customer User Switching versions n/a through 3.8 Description: The issue is related to an Improper Authentication vulnerability that allows Privilege Escalation. This vulnerability can be exploited to escalate privilege...
CVE-2024-21000
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromi...
CVE-2024-29401
xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything...
PT-2024-22882 · Xzs-Mysql · Xzs-Mysql
Name of the Vulnerable Software and Affected Versions: xzs-mysql version 3.8 Description: The issue allows attackers to use the session of a deleted admin to perform any action due to insufficient session expiration. Recommendations: For xzs-mysql version 3.8, at the moment, there is no informati...
CVE-2023-44487 affecting package multus for versions less than 3.8-12
CVE-2023-44487 affecting package multus for versions less than 3.8-12. A patched version of the package is available...
CVE-2023-7247
The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site...
WordPress Plugin Login as User or Customer Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
BIT-MOODLE-2020-1691
In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting...
BIT-MOODLE-2020-25703
The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5 and 3.7 to 3.7.8. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, and 3.10...
BIT-MOODLE-2021-32476
A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...
BIT-PYTHON-2020-15523
In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4, and 3.9 through 3.9.0 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading after...
BIT-RABBITMQ-2020-5419
RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binary hijacking...
CVE-2024-22459
Dell ECS (versions 3.6–3.6.2.5, 3.7–3.7.0.6, and 3.8–3.8.0.4) contains an improper access control vulnerability that could allow a remote high-privileged attacker to access all buckets and their data within a namespace. The issue is confirmed across multiple sources in the connected documents and...
PT-2024-19437 · Dell · Dell Ecs
Name of the Vulnerable Software and Affected Versions: Dell ECS versions 3.6 through 3.6.2.5 Dell ECS versions 3.7 through 3.7.0.6 Dell ECS versions 3.8 through 3.8.0.4 Description: The issue is related to an improper access control vulnerability. A remote high privileged attacker could potential...