RHSA-2021:2522 Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]

Bulletin has no description...

RHSA-2021:2180 Red Hat Security Advisory: RHV Engine and Host Common Packages security update [ovirt-4.4.6]

Bulletin has no description...

CVE-2024-28077

A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect devices exposed to the external network through DDNS, and consequently obtain the IP addresses and ports of devices that are exposed. By using special usernames and special characters such as half...

Joomla! URL Validation Vulnerability (20240801)

Joomla! is prone to an inadequate validation of internal URLs vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla! 安全漏洞

Joomla! is a free, open-source content management system open-sourced by Joomla! A security vulnerability exists in Joomla! versions 3.4.6 through 3.10.16-elts, 4.0.0 through 4.4.6, and 5.0.0 through 5.1.2, which stems from an insufficient URL validation, which results in an invalid check to see ...

Joomla core 4.0.0-4.4.6,5.0.0-5.1.2 - Unauthenticated Improper ACL for backend profile view vulnerability

Unauthenticated Improper ACL for backend profile view vulnerability discovered by ? in WordPress Core Joomla versions 4.0.0-4.4.6,5.0.0-5.1.2...

PT-2024-27438 · Unknown · Nextscripts

Name of the Vulnerable Software and Affected Versions: NextScripts versions through 4.4.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions through...

CVE-2024-37418

Unrestricted Upload of File with Dangerous Type vulnerability in Andy Moyle Church Admin allows Upload a Web Shell to a Web Server.This issue affects Church Admin: from n/a through 4.4.6...

WordPress plugin Church Admin code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

PT-2024-27535

Name of the Vulnerable Software and Affected Versions Andy Moyle Church Admin versions n/a through 4.4.6 Description The issue allows an attacker to upload a web shell to a web server due to an unrestricted upload of file with dangerous type vulnerability. This enables potential remote code...

WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Peng Zhou in WordPress Plugin Church Admin versions = 4.4.6...

Simple Membership < 4.4.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

Description The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpmpaypalsubscriptioncancellink' shortcode in all versions up to, and including, 4.4.5 due to insufficient input sanitization and output escaping on user supplied attributes. Thi...

CVE-2023-7071

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in all versions up to, and including, 4.4.6 due to insufficient input sanitization and output escaping. This makes it possib...

PT-2024-15199 · WordPress · The Essential Blocks – Page Builder Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress versions up to, and including, 4.4.6 Description: The issue is related to Stored Cross-Site Scripting via the Table of Contents block due to...

Various GL.iNet products Security Breach

GL.iNet MT3000 and others are products of China-based GL.iNet GL.iNet.GL.iNet MT3000 is an AX3000 portable router that uses the Wi-Fi 6 protocol.GL.iNet MT2500 is a router.GL.iNet MT6000 is a router. A security vulnerability exists in various GL.iNet products that originated from a vulnerability...

Cross site request forgery (csrf)

The WP Travel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.4.6. This is due to missing or incorrect nonce validation on the savemetadata function. This makes it possible for unauthenticated attackers to save metadata for travel posts via a...

WordPress Plugin WP Travel 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2023-2414

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vcitasavesettingscallback function in versions up to, and including, 4.4.6. This makes it possible for authenticated...

Cross site scripting

Craft is a CMS for creating custom digital experiences on the web. A malformed RSS feed can deliver an XSS payload. This issue was patched in version 4.4.6...

CVE-2023-33195 Craft CMS XSS in RSS widget feed

Craft is a CMS for creating custom digital experiences on the web. A malformed RSS feed can deliver an XSS payload. This issue was patched in version 4.4.6...