EUVD-2025-32687

Malicious code in solarpeng09 npm...

CVE-2024-32687

Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce.This issue affects WPC Frequently Bought Together for WooCommerce: from n/a through 7.0.3...

CVE-2023-32687

tgstation-server is a toolset to manage production BYOND servers. Starting in version 4.7.0 and prior to 5.12.1, instance users with the list chat bots permission can read chat bot connections strings without the associated permission. This issue is patched in version 5.12.1. As a workaround,...

CVE-2025-32687

creationtimestamp| type| source ---|---|--- 2025-04-10 09:49:02+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114313038180765217 2025-04-10 11:10:33+00:00| seen| https://t.me/cvedetector/22626 2025-04-10 11:32:41+00:00| seen|...

CVE-2025-32687 WordPress Review Stars Count For WooCommerce <= 2.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Magnigenie Review Stars Count For WooCommerce allows SQL Injection. This issue affects Review Stars Count For WooCommerce: from n/a through 2.0...

WordPress Review Stars Count For WooCommerce plugin <= 2.0 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Aiden Thái An in WordPress Plugin Review Stars Count For WooCommerce versions = 2.0...

CVE-2024-32687

CVE-2024-32687 describes a missing authorization vulnerability in WPC Frequently Bought Together for WooCommerce, affecting the plugin for WooCommerce up to version 7.0.3. The description and metrics indicate a network-accessible issue with low privileges required and no UI interaction, but no co...

WordPress WPC Frequently Bought Together for WooCommerce Plugin <= 7.0.3 is vulnerable to Broken Access Control

Software WPC Frequently Bought Together for WooCommerce Type Plugin Vulnerable versions = 7.0.3 Fixed in 7.0.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32687 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID bea1d55fe32c Credit...

Amazon Linux 2 : redis (ALASREDIS6-2023-006)

The version of redis installed on the remote host is prior to 6.2.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2REDIS6-2023-006 advisory. Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can b...

BELL-CVE-2021-32687 CVE-2021-32687 does not affect BellSoft software

Bulletin has no description...

CVE-2023-32687

CVE-2023-32687 affects tgstation-server versions 4.7.0 through 5.12.1, where users with the public list chat bots permission can read chat bot connection strings without the required permission. The issue is patched in version 5.12.1. Remediation: update to 5.12.1; as a workaround, remove the lis...

CVE-2023-32687 Insufficiently Protected ChatBot Credentials in tgstation-server

tgstation-server is a toolset to manage production BYOND servers. Starting in version 4.7.0 and prior to 5.12.1, instance users with the list chat bots permission can read chat bot connections strings without the associated permission. This issue is patched in version 5.12.1. As a workaround,...

CVE-2023-32687 Insufficiently Protected ChatBot Credentials in tgstation-server

tgstation-server is a toolset to manage production BYOND servers. Starting in version 4.7.0 and prior to 5.12.1, instance users with the list chat bots permission can read chat bot connections strings without the associated permission. This issue is patched in version 5.12.1. As a workaround,...

Ubuntu: Security Advisory (USN-5221-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-32687 affecting package redis for versions less than 6.2.6-1

CVE-2021-32687 affecting package redis for versions less than 6.2.6-1. An upgraded version of the package is available that resolves this issue...

OESA-2021-1454 redis6 security update

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

openSUSE: Security Advisory for redis (openSUSE-SU-2021:3772-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2021:3772-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2021:3772-1 Security update for redis

This update for redis fixes the following issues: - CVE-2021-32627: Fixed integer to heap buffer overflows with streams bsc1191305. - CVE-2021-32628: Fixed integer to heap buffer overflows handling ziplist-encoded data types bsc1191305. - CVE-2021-32687: Fixed integer to heap buffer overflow with...

Debian: Security Advisory (DLA-2810-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...