45 matches found
MINI-5GV4-V8JR-6584
Bulletin has no description...
MINI-6584-5CP7-9X9M
Bulletin has no description...
CVE-2026-6584
A vulnerability was found in TransformerOptimus SuperAGI up to 0.0.14. This vulnerability affects the function updateuser of the file superagi/controllers/user.py of the component User Update Endpoint. The manipulation of the argument userid results in authorization bypass. The attack may be...
ECHO-BAA9-6584-31D1
Bulletin has no description...
CVE-2019-6584
A vulnerability has been identified in SIEMENS LOGO!8 6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx, SIEMENS LOGO!8 6ED1052-xyy08-0BA0 FS:01 / Firmware version V1.82.02. The integrated webserver does not invalidate the Session ID upon user logout. An attacker that...
CVE-2024-6584 Jetpack Boost < 3.4.7 - Admin+ SSRF
The 'wpajaxboostproxyig' action allows administrators to make GET requests to arbitrary URLs...
CVE-2024-6584
CVE-2024-6584 describes an SSRF issue in WordPress Jetpack Boost where the action wp_ajax_boost_proxy_ig lets administrators make GET requests to arbitrary URLs. Public details in connected docs associate this with a WordPress Jetpack Boost vulnerability (Admin+ SSRF) and indicate a fix in Jetpac...
CVE-2024-6584 Jetpack Boost < 3.4.7 - Admin+ SSRF
The 'wpajaxboostproxyig' action allows administrators to make GET requests to arbitrary URLs...
CVE-2024-6584 Jetpack Boost < 3.4.7 - Admin+ SSRF
The 'wpajaxboostproxyig' action allows administrators to make GET requests to arbitrary URLs...
RHEL 7 : httpd (RHSA-2024:6584)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:6584 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Security issues via?backe...
CVE-2023-6584
creationtimestamp| type| source ---|---|--- 2024-02-27 10:26:07+00:00| seen| https://t.me/ctinow/194181 2024-02-27 10:26:27+00:00| seen| https://t.me/ctinow/194195...
CVE-2023-6584
The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address...
CVE-2023-6584 JobSearch WP Job Board < 2.3.4 - Authentication Bypass
The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address...
CVE-2023-6584 JobSearch WP Job Board < 2.3.4 - Authentication Bypass
The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address...
WordPress JobSearch Plugin < 2.3.4 is vulnerable to Broken Authentication
Software JobSearch Type Plugin Vulnerable versions 2.3.4 Fixed in 2.3.4 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2023-6584 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID f4a18b4236e5 Credits Marc Montpas...
Ubuntu 16.04 LTS : Libspf2 vulnerabilities (USN-6584-2)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6584-2 advisory. USN-6584-1 fixed several vulnerabilities in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update provides the corresponding updates for CVE-2021-33912 and...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : Libspf2 vulnerabilities (USN-6584-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6584-1 advisory. Philipp Jeitner and Haya Shulman discovered that Libspf2 incorrectly handled certain inputs. If a user or an automated system wer...
CVE-2020-6584
Nagios Log Server 2.1.3 has Incorrect Access Control...
CVE-2020-6584
CVE-2020-6584 concerns Nagios Log Server 2.1.3 and is described as an Incorrect Access Control vulnerability. The connected CNVD entry adds that an attacker can exploit this by stealing the administrator’s CSRF token (csrf_ls) and PHPSESSID to perform the desired operation, indicating a potential...