2476 matches found
AF Companion 1.1.0 - 1.1.2 - Arbitrary Plugin Installation & Activation via CSRF
The plugin has a flawed CSRF check, allowing attackers to make logged in admin installs and activate arbitrary plugins from the WP repository...
AF Companion 1.1.0 - 1.1.2 - Arbitrary Plugin Installation & Activation via CSRF
The plugin has a flawed CSRF check, allowing attackers to make logged in admin installs and activate arbitrary plugins from the WP repository PoC...
The vulnerability of the activation function for software-based web conference solutions like Cisco Webex Meetings allows a perpetrator to send an email with an activation link that points to any domain.
The vulnerability of the software activation function for Cisco WebEx Meetings involves insufficient checking of parameters provided by users. Exploiting this vulnerability allows a malicious actor to send an email with an activation link to any domain...
systemd bug fix and enhancement update
An update is available for systemd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The systemd packages contain systemd, a system and service manager for Linux,...
Reprise Software Reprise License Manager has an unspecified vulnerability
Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications.Reprise Software Reprise License...
Reprise License Manager Remote Code Execution Vulnerability
Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications.Reprise Software Reprise License...
Reprise Software Reprise License Manager 安全漏洞
Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications.Reprise Software Reprise License...
The vulnerability of iOS operating systems, related to deficiencies in authentication procedures, allows a perpetrator to activate the Apple Pay transaction card on a locked or drained phone.
The vulnerability of iOS operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enable the Apple Pay payment card on a locked or drained phone using a static 15-byte string...
Improper access control
Missing Handler vulnerability in the proprietary management protocol port TCP 5558 of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x...
CVE-2021-40334 SSH activation problem in the proprietary management protocol (port TCP 5558)
Missing Handler vulnerability in the proprietary management protocol port TCP 5558 of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x...
XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry
A flaw was found in xstream. A remote attacker, who has sufficient rights, can execute commands of the host by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
Multiple vulnerabilities in multiple ELECOM routers
Overview Multiple routers provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Improper access control leading to unauthorized activation of telnet service CWE-284 - CVE-2021-20862 OS command injection CWE-78 - CVE-2021-20863 Improper access control leading to unauthorized...
CVE-2021-24703
The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwappluginactivate AJAX action, allowing any authenticated users, such as subscribers, to activate plugins that are already installed...
Cross site request forgery (csrf)
The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwappluginactivate AJAX action, allowing any authenticated users, such as subscribers, to activate plugins that are already installed...
CVE-2021-24703
Summary: CVE-2021-24703 affects the WordPress Download Plugin (pre-1.6.1). The issue is in the dpwap_plugin_activate AJAX action, which lacks capability checks and CSRF verification. As a result, any authenticated user (e.g., subscribers) can activate plugins that are already installed. Impact (a...
CVE-2021-24703 Download Plugin < 1.6.1 - Subscriber+ Arbitrary Plugin Activation
The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwappluginactivate AJAX action, allowing any authenticated users, such as subscribers, to activate plugins that are already installed...
CVE-2021-40334
Missing Handler vulnerability in the proprietary management protocol port TCP 5558 of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x...
PT-2021-16207 · WordPress · Download Plugin
Name of the Vulnerable Software and Affected Versions: Download Plugin WordPress plugin versions prior to 1.6.1 Description: The issue concerns a lack of capability and CSRF checks in the dpwap plugin activate AJAX action. This allows any authenticated users to activate plugins that are already...
WordPress plugin Download Plugin 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...