4652 matches found
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in StylemixThemes GDPR Compliance & Cookie Consent plugin = 1.2 versions...
CVE-2022-45815 WordPress GDPR Compliance & Cookie Consent Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in StylemixThemes GDPR Compliance & Cookie Consent plugin = 1.2 versions...
CVE-2022-45815
CVE-2022-45815 : A CSRF vulnerability exists in the StylemixThemes GDPR Compliance & Cookie Consent WordPress plugin (versions <= 1.2). The issue allows unauthenticated or unintended actions on behalf of a logged-in user, depending on the context, and is confirmed in public vulnerability datab...
PT-2023-14765 · Stylemixthemes · Stylemixthemes Gdpr Compliance & Cookie Consent
Name of the Vulnerable Software and Affected Versions: StylemixThemes GDPR Compliance & Cookie Consent plugin versions 1.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performin...
WordPress plugin GDPR Compliance & Cookie Consent 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...
PT-2023-15324 · Xiligroup · Dev.Xiligroup.Com - Ms Plugin
Name of the Vulnerable Software and Affected Versions: dev.Xiligroup.Com - MS plugin versions 1.12.03 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...
PCI DSS Compliance : Security End of Life Software
According to its version, the following software is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. The PCI Data Security Standard requires...
Casting a Light on Shadow IT in Cloud Environments
What is Shadow IT? The term “Shadow IT” refers to the use of systems, devices, software, applications, and services without explicit IT approval. This typically occurs when employees adopt consumer products to increase productivity or just make their lives easier. This type of Shadow IT can be...
E.U. Regulators Hit Meta with Record $1.3 Billion Fine for Data Transfer Violations
Facebook's parent company Meta has been fined a record $1.3 billion by European Union data protection regulators for transferring the personal data of users in the region to the U.S. In a binding decision taken by the European Data Protection Board EDPB, the social media giant has been ordered to...
ALSA-2023:3220 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.11.0 ESR. Security Fixes: Mozilla: Browser prompts could have been obscured by popups CVE-2023-32205 Mozilla: Crash in RLBox Expat driver...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
ALSA-2023:3143 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.11.0 ESR. Security Fixes: Mozilla: Browser prompts could have been obscured by popups CVE-2023-32205 Mozilla: Crash in RLBox Expat driver...
Fedora: Security Advisory for firefox (FEDORA-2023-45b3c1d9ed)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: firefox-113.0-1.fc37
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Solving Your Teams Secure Collaboration Challenges
In today's interconnected world, where organisations regularly exchange sensitive information with customers, partners and employees, secure collaboration has become increasingly vital. However, collaboration can pose a security risk if not managed properly. To ensure that collaboration remains...
[SECURITY] Fedora 38 Update: firefox-113.0-1.fc38
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Adopting an Effective and Easy To Implement Zero Trust Architecture
Security professionals employed by a federal agency, supplier, or regulated private sector firm are often challenged by long lists of required cybersecurity rules that can seem endless and unchanging. White House Executive Orders, FedRAMP requirements, CISA Binding Operational Directives, NIST...
New TSA Cybersecurity Emergency Action Rule Impacts Cybersecurity and Compliance
On March 7, 2023, in the wake of President Joe Biden’s National Cybersecurity Strategy announcement, the U.S. Transportation Security Administration TSA issued a cybersecurity emergency action amendment for certain regulated airport and aircraft operators. The new Action Rule can have significant...
Four key questions for privacy programs in the U.S.
With new state privacy laws passed each year, organizations are tasked with developing privacy programs that are compliant with applicable laws. To help organizations identify their current privacy program maturity, privacy professionals can ask four questions to determine where they stand...
PT-2023-2720
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue is related to a remote code execution vulnerability in Microsoft SharePoint Server. This vulnerability allows an authenticated attacker with Site Owner privilege...