CVE-2023-29164

Improper access control in BMC Firmware for the IntelR Server Board S2600WF, IntelR Server Board S2600ST, IntelR Server Board S2600BP, before version 02.01.0017 and IntelR Server Board M50CYP and IntelR Server Board D50TNP before version R01.01.0009 may allow an authenticated user to enable...

CVE-2023-31276

Heap-based buffer overflow in BMC Firmware for the IntelR Server Board S2600WF, IntelR Server Board S2600ST, IntelR Server Board S2600BP, before version 02.01.0017 and IntelR Server Board M50CYP and IntelR Server Board D50TNP before version R01.01.0009 may allow a privileged user to enable...

CVE-2023-31276

CVE-2023-31276 describes a heap-based buffer overflow in the BMC firmware of Intel Server Board families S2600WF/S2600ST/S2600BP (and M50CYP) and D50TNP. Root cause: heap overflow in BMC firmware that may allow escalation of privilege via local access. Affected before: S2600WF/S2600ST/S2600BP bef...

CVE-2022-36370

Improper authentication in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31103

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kanban for WordPress Kanban Boards for WordPress allows Reflected XSS.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21...

U.S. Dept Of Defense: ASBS Analytics Dashboard

A dashboard was found to provide authenticated users with access to user and session analytics for the platform. The dashboard allowed users to view information such as active boards, total candidates, vote rate, and estimated completion in the last 12 days. The affected product version was...

CVE-2024-11844

The IdeaPush plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ideapushtaxonomysaveroutine function in all versions up to, and including, 8.71. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2024-11844

The IdeaPush plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ideapushtaxonomysaveroutine function in all versions up to, and including, 8.71. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2024-11844 IdeaPush <= 8.71 - Missing Authorization to Board Term Deletion

The IdeaPush plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ideapushtaxonomysaveroutine function in all versions up to, and including, 8.71. This makes it possible for authenticated attackers, with Subscriber-level access and above...

PT-2024-17291 · WordPress · Ideapush

Name of the Vulnerable Software and Affected Versions: IdeaPush plugin for WordPress versions up to, and including, 8.71 Description: The issue concerns a lack of capability check in the idea push taxonomy save routine function, allowing authenticated attackers with Subscriber-level access and...

The vulnerability of the Agile Boards component of the software tool for project and task management, JetBrains YouTrack, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Agile Boards component of the JetBrains YouTrack project management and task management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

CVE-2024-37226 WordPress Kanban Boards for WordPress plugin <= 2.5.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kanban for WordPress Kanban Boards for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21...

WordPress plugin Kanban Boards for WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-27395 · WordPress · Kanban Boards For Wordpress

Name of the Vulnerable Software and Affected Versions: Kanban Boards for WordPress versions through 2.5.21 Description: The issue affects Kanban Boards for WordPress due to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels...

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

CVE-2024-50578

Summary: CVE-2024-50578 affects JetBrains YouTrack prior to 2024.3.47707, where a stored XSS vulnerability exists in the Agile Boards page triggered by a sprint value. Impact (as described): cross-site scripting could be exploited via the Agile Boards sprint field, enabling attacker-controlled co...

PT-2024-7635 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.47707 Description: The issue is related to a stored XSS vulnerability in the Agile Boards page of JetBrains YouTrack. This vulnerability can be exploited by an attacker to conduct cross-site scripti...