2218 matches found
CVE-2023-47523
CVE-2023-47523 is a Missing Authorization vulnerability in the WordPress plugin Auto Tag Creator (
CVE-2023-47515
CVE-2023-47515 concerns the WordPress plugin “Seers – GDPR & CCPA Cookie Consent & Compliance”. Connected sources confirm a Missing Authorization/Broken Access Control issue affecting Seers versions up to 8.1.1, allowing unauthenticated access to configured security levels. The root cause is insu...
CVE-2023-46644
CVE-2023-46644 documents a Missing Authorization vulnerability in the WP CTA PRO WordPress CTA plugin (WordPress CTA)
CVE-2023-46635
CVE-2023-46635 is a Broken Access Control vulnerability in the WordPress plugin YITH WooCommerce Product Add-Ons up to version 4.2.0 . The issue allows exploitation of an incorrectly configured access control/security levels, with unauthenticated attackers potentially accessing restricted functio...
CVE-2023-46633
CVE-2023-46633: WordPress WP Glossary plugin
CVE-2023-46632
CVE-2023-46632 : WordPress plugin My Shortcodes
CVE-2023-46616
CVE-2023-46616 affects NSquared Draw Attention (WordPress plugin)
CVE-2023-46203
CVE-2023-46203 concerns WordPress plugin Just Custom Fields (v
CVE-2023-46080
CVE-2023-46080 : WordPress plugin ApplyOnline – Application Form Builder and Manager
CVE-2023-45275
The CVE-2023-45275 entry refers to a Missing Authorization / Broken Access Control issue in the WordPress Kali Forms plugin (Contact Form builder with drag & drop). Affected versions are Kali Forms through 2.3.28; the vulnerability stems from an access-control weakness that could be exploited by ...
CVE-2023-45110
CVE-2023-45110 concerns Bold Timeline Lite (WordPress plugin) with a Missing Authorization/Broken Access Control vulnerability present up to version
CVE-2023-44258
CVE-2023-44258 affects the WordPress plugin Schema App Structured Data for Schema.org (Schema App Structured Data) versions 1.23.1 and earlier. The root cause is Missing Authorization via page_init, i.e., broken access control that can permit unauthorized access to sensitive data. CVSS v3.1 base ...
BELL-CVE-2024-56594
Bulletin has no description...
CVE-2023-50850
CVE-2023-50850 concerns a missing/relaxed authorization issue in the WordPress plugin WooCommerce Subscriptions prior to version 5.8.0. The vulnerability is described as broken access control that allows exploitation via incorrectly configured access control security levels, affecting WooCommerce...
CVE-2024-56710
In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in cephdirectreadwrite The bvecs array which is allocated in itergetbvecsalloc is leaked and pages remain pinned if cephallocsparseextmap fails. There is no need to delay the allocation of sparseext map unti...
CVE-2020-1823
CVE-2020-1823 relates to multiple out-of-bounds (OOB) read vulnerabilities in Huawei devices’ Common Open Policy Service (COPS) protocol implementation. The issue arises from the decoding function processing incoming data packets, potentially enabling disruption of service on affected devices. Th...
CVE-2020-1820
CVE-2020-1820 is part of seven Huawei-related OOB read vulnerabilities in the COPS protocol implementation. The Huawei PSIRT advisory describes multiple decoding functions that may read beyond bounds when processing an incoming COPS data packet, potentially disrupting service on affected devices....
CVE-2024-56576
creationtimestamp| type| source ---|---|--- 2024-12-27 15:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbtnwxzv2f 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...
CVE-2020-9089
CVE-2020-9089 affects Huawei smartphones. The issue is that a function in a module can be called without verifying the caller’s access, enabling user‑level attackers to obtain information (information disclosure). CVSSv3.1 base score 3.3 (LOW); attack is LOCAL with LOW complexity and requires LOW...
SUSE: Security Advisory (SUSE-SU-2024:4397-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...