4007 matches found
CVE-2023-23978
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SwitchWP WP Client Reports plugin = 1.0.16 versions...
Code injection
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SwitchWP WP Client Reports plugin = 1.0.16 versions...
Code injection
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Content plugin = 3.2.7 versions...
Design/Logic Flaw
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce plugin = 7.1.1 versions...
CVE-2023-23978
Summary: CVE-2023-23978 affects the WordPress plugin “SwitchWP WP Client Reports” (WP Client Reports) and its vulnerable line is versions ≤ 1.0.16. The vulnerability is described as an exposure of sensitive information to an unauthorized actor. The Patchstack entry confirms a fix in version 1.0.1...
Diamond Sleet supply chain compromise distributes a modified CyberLink installer
Microsoft Threat Intelligence has uncovered a supply chain attack by the North Korea-based threat actor Diamond Sleet ZINC involving a malicious variant of an application developed by CyberLink Corp., a software company that develops multimedia software products. This malicious file is a legitima...
Diamond Sleet supply chain compromise distributes a modified CyberLink installer
Microsoft Threat Intelligence has uncovered a supply chain attack by the North Korea-based threat actor Diamond Sleet ZINC involving a malicious variant of an application developed by CyberLink Corp., a software company that develops multimedia software products. This malicious file is a legitima...
CVE-2023-5983
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data. This issue affects Pharmacy Automation: before 2.1.133.0...
CVE-2023-5983 Information Disclosure in Botanik Software Pharmacy Automation
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data. This issue affects Pharmacy Automation: before 2.1.133.0...
CVE-2023-5983 Information Disclosure in Botanik Software Pharmacy Automation
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data. This issue affects Pharmacy Automation: before 2.1.133.0...
CVE-2023-5983
CVE-2023-5983 affects Botanik Software Pharmacy Automation. Several sources confirm an information-disclosure vulnerability in versions prior to 2.1.133.0, allowing retrieval of embedded sensitive data and private personal information by an unauthorized actor. CVSSv3.1 base score 7.5 (HIGH) with ...
CVE-2023-38880
The Community Edition version 9.0 of OS4ED's openSIS Classic has a broken access control vulnerability in the database backup functionality. Whenever an admin generates a database backup, the backup is stored in the web root while the file name has a format of "opensisBackup.sql" e.g...
CVE-2023-38880
The Community Edition version 9.0 of OS4ED's openSIS Classic has a broken access control vulnerability in the database backup functionality. Whenever an admin generates a database backup, the backup is stored in the web root while the file name has a format of "opensisBackup.sql" e.g...
Debian dla-3658 : wordpress - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3658 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3658-1 [email protected]...
The vulnerability of Zoom’s video conferencing software lies in the insufficient testing of exception states, allowing attackers to trigger service failures.
The vulnerability of Zoom video conferencing software is related to insufficient testing of exception states. Exploiting this vulnerability could allow a malicious actor to cause service failures...
VMware Cloud Director Authentication Bypass (VMSA-2023-0026)
VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 10.5 from an older version. On an upgraded version of VMware Cloud Director Appliance 10.5, a malicious actor with network access to the appliance can bypass log...
CVE-2023-48134
nagayamacopabowl Line 13.6.1 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2023-48134
nagayamacopabowl Line 13.6.1 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...