13 matches found
CVE-2024-37448
Cross-Site Request Forgery CSRF vulnerability in famethemes OnePress onepress allows Cross Site Request Forgery.This issue affects OnePress: from n/a through = 2.3.6...
CVE-2024-37448
creationtimestamp| type| source ---|---|--- 2025-01-02 12:19:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2pihnrt2i 2025-01-02 17:08:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113759859632900813...
CVE-2024-37448 WordPress OnePress theme <= 2.3.6 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in famethemes OnePress onepress allows Cross Site Request Forgery.This issue affects OnePress: from n/a through = 2.3.6...
WordPress OnePress Theme <= 2.3.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software OnePress Type Theme Vulnerable versions = 2.3.6 Fixed in 2.3.7 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37448 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c9968969f7ad Credits Dhabaleshwar Das Required...
ruby:3.3 security, bug fix, and enhancement update
ruby 3.3.1-2 - Upgrade to Ruby 3.3.1. Resolves: RHEL-37446 - Fix buffer overread vulnerability in StringIO. CVE-2024-27280 Resolves: RHEL-37448 - Fix RCE vulnerability with .rdocoptions in RDoc. CVE-2024-27281 Resolves: RHEL-37449 - Fix Arbitrary memory address read vulnerability with Regex searc...
CVE-2023-37448
A lock screen issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. A user may be able to view restricted content from the lock screen...
CVE-2023-37448
CVE-2023-37448 – A lock screen issue in macOS Sonoma 14 could allow viewing restricted content due to insufficient state management. The vulnerability is addressed in macOS Sonoma 14 (remediation: upgrade to Sonoma 14 or later). Connected sources consistently describe the issue and confirm the fi...
CVE-2022-37448
CVE-2022-37448 entry is rejected/not used.
CVE-2021-37448
creationtimestamp| type| source ---|---|--- 2021-07-26 02:40:36+00:00| seen| https://t.me/cibsecurity/26462...
CVE-2021-37448
Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name stored...
CVE-2021-37448
CVE-2021-37448 affects NCH IVM Attendant v5.12 and earlier. The root cause is stored XSS in the Mailbox name due to insufficient input filtering for special characters, enabling execution of client-side code. Affected software is NCH IVM Attendant; impact is cross-site scripting with potential fo...