SUSE: Security Advisory (SUSE-SU-2024:4389-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-32203

CVE-2022-32203 describes a command-injection vulnerability in Huawei terminal printer products. The issue allows high-privilege code execution on the printer after exploitation over the network (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8). The root cause is described as insufficient...

CVE-2021-26115

CVE-2021-26115 describes an OS command injection in FortiWAN up to version 4.5.7 (and earlier) affecting the FortiWAN Command Line Interface. The flaw allows a local, authenticated, unprivileged attacker to escalate privileges to root by executing a specially crafted command due to improper input...

CVE-2021-39081

creationtimestamp| type| source ---|---|--- 2024-12-19 00:35:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113676682434744713 2024-12-19 03:05:39+00:00| seen| https://t.me/cvedetector/13296...

CVE-2022-44520

CVE-2022-44520 affects Adobe Acrobat/Reader: Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. It is a use‑after‑free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user i...

CVE-2022-44514

CVE-2022-44514 : Acrobat Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) is affected by a use‑after‑free vulnerability that can cause arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file, en...

SUSE: Security Advisory (SUSE-SU-2024:4327-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-44147

CVE-2023-44147 affects the WordPress Comment Blacklist Updater plugin up to version 1.1.0. The root cause is a missing/incorrect authorization in access control (Broken Access Control), exploitable by unauthenticated users to exploit misconfigurations. The CVSS 3.1 base score is 5.3 (Medium). Rem...

CVE-2023-41875

CVE-2023-41875 describes a Missing Authorization vulnerability in the WordPress plugin WP Directory Kit (versions

CVE-2023-41873

CVE-2023-41873 targets the WordPress plugin “miniOrange SAML SP Single Sign On.” The issue is a Missing Authorization vulnerability (Broken Access Control) in the plugin’s access checks, allowing exploitation of misconfigured security levels for SAML SSO. Affected: versions up to 5.0.4 (from n/a ...

CVE-2023-41649

CVE-2023-41649 affects the WordPress plugin Ovic Product Bundle (versions up to 1.1.2). The issue is a Missing Authorization / Broken Access Control vulnerability that allows unauthenticated users to exploit misconfigured access controls. Across connected records, there is no published patch vers...

CVE-2023-33324

CVE-2023-33324 is a Missing Authorization/Broken Access Control vulnerability in WordPress plugin Easy Captcha (versions up to 1.0). The issue arises from insufficient access checks, enabling unauthorized entities to perform restricted actions. The vulnerability affects Easy Captcha

openSUSE Security Advisory (SUSE-SU-2024:4306-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:4288-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-22701

CVE-2023-22701 affects WordPress Ebook Store plugin (≤ 5.775). The root cause is Missing Authorization / Broken Access Control allowing unauthenticated access to ebook_store_export_orders, potentially exposing order data. NVD CVSSv3.1 base score is 9.8 (CRITICAL); patch notes indicate fix in v5.7...

CVE-2023-32293

CVE-2023-32293 relates to WordPress plugin WRC Pricing Tables (Realwebcare) up to version 2.3.7. The issue is a Missing/Broken Authorization vulnerability caused by incorrectly configured access control security levels, allowing unauthenticated users to access or manipulate data that should be re...

CVE-2023-32299

CVE-2023-32299 affects the WordPress plugin Ni WooCommerce Sales Report (Ni WooCommerce Sales Report) up to version 3.7.3, due to Missing Authorization / Broken Access Control. Attackers with subscriber-level privileges could exploit an improperly enforced access control to view sales data. The v...

CVE-2023-47756

CVE-2023-47756 is a Missing Authorization (Broken Access Control) vulnerability in the Welcome Email Editor WordPress plugin. Affected versions are

CVE-2023-47820

CVE-2023-47820 affects WordPress WP Like Button

CVE-2023-47871

CVE-2023-47871 concerns the WordPress plugin Contact Form to Any API (<= 1.1.6). Connected sources confirm a Broken Access Control/Missing Authorization vulnerability in the plugin, allowing unintended access to API-related functionality. PatchStack lists the affected version range