EUVD-2024-0425

Malicious code in bioql PyPI...

PT-2024-38286 · WordPress · Organization Chart Plugin

Name of the Vulnerable Software and Affected Versions: Organization chart plugin for WordPress versions up to, and including, 1.5.0 Description: The issue arises from insufficient input sanitization and output escaping, allowing authenticated attackers with Subscriber-level access and above to...

CVE-2023-49734

Apache Superset is affected by an privilege-escalation vulnerability (CVE-2023-49734) where an authenticated Gamma user can create a dashboard, add charts, and automatically become an owner of those charts, gaining write permissions. Affected versions include the prior 2.1.x line (before 2.1.2) a...