46 matches found
MINI-5GV4-V8JR-6584
Bulletin has no description...
MINI-6584-5CP7-9X9M
Bulletin has no description...
CVE-2026-6584
A vulnerability was found in TransformerOptimus SuperAGI up to 0.0.14. This vulnerability affects the function updateuser of the file superagi/controllers/user.py of the component User Update Endpoint. The manipulation of the argument userid results in authorization bypass. The attack may be...
ECHO-BAA9-6584-31D1
Bulletin has no description...
CVE-2019-6584
A vulnerability has been identified in SIEMENS LOGO!8 6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx, SIEMENS LOGO!8 6ED1052-xyy08-0BA0 FS:01 / Firmware version V1.82.02. The integrated webserver does not invalidate the Session ID upon user logout. An attacker that...
CVE-2024-6584 Jetpack Boost < 3.4.7 - Admin+ SSRF
The 'wpajaxboostproxyig' action allows administrators to make GET requests to arbitrary URLs...
CVE-2024-6584
CVE-2024-6584 describes an SSRF issue in WordPress Jetpack Boost where the action wp_ajax_boost_proxy_ig lets administrators make GET requests to arbitrary URLs. Public details in connected docs associate this with a WordPress Jetpack Boost vulnerability (Admin+ SSRF) and indicate a fix in Jetpac...
CVE-2024-6584 Jetpack Boost < 3.4.7 - Admin+ SSRF
The 'wpajaxboostproxyig' action allows administrators to make GET requests to arbitrary URLs...
CVE-2024-6584 Jetpack Boost < 3.4.7 - Admin+ SSRF
The 'wpajaxboostproxyig' action allows administrators to make GET requests to arbitrary URLs...
RHEL 7 : httpd (RHSA-2024:6584)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:6584 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Security issues via?backe...
CVE-2023-6584
creationtimestamp| type| source ---|---|--- 2024-02-27 10:26:07+00:00| seen| https://t.me/ctinow/194181 2024-02-27 10:26:27+00:00| seen| https://t.me/ctinow/194195...
CVE-2023-6584
The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address...
CVE-2023-6584 JobSearch WP Job Board < 2.3.4 - Authentication Bypass
The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address...
CVE-2023-6584 JobSearch WP Job Board < 2.3.4 - Authentication Bypass
The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only knowledge of that user's email address...
WordPress JobSearch Plugin < 2.3.4 is vulnerable to Broken Authentication
Software JobSearch Type Plugin Vulnerable versions 2.3.4 Fixed in 2.3.4 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2023-6584 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID f4a18b4236e5 Credits Marc Montpas...
Ubuntu 16.04 LTS : Libspf2 vulnerabilities (USN-6584-2)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6584-2 advisory. USN-6584-1 fixed several vulnerabilities in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update provides the corresponding updates for CVE-2021-33912 and...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : Libspf2 vulnerabilities (USN-6584-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6584-1 advisory. Philipp Jeitner and Haya Shulman discovered that Libspf2 incorrectly handled certain inputs. If a user or an automated system wer...
CVE-2020-6584
Nagios Log Server 2.1.3 has Incorrect Access Control...
