UBUNTU-CVE-2023-4759

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

Eclipse JGit Security Vulnerability

Eclipse JGit is an open source Java implementation of the Eclipse Foundation for working with the Git version control system. A security vulnerability exists in Eclipse JGit 6.6.0 and earlier versions, which stems from the presence of symbolic links in specially crafted git repositories that can...

Checkout Field Editor < 1.7.5 - Checkout Fields Update via CSRF

Description The plugin does not have CSRF check in place when updating checkout fields, which could allow attackers to make logged in users update them via a CSRF attack input type="hidden" name="fieldvalidation1" value="req...

Checkout Field Editor < 1.7.5 - Checkout Fields Update via CSRF

Description The plugin does not have CSRF check in place when updating checkout fields, which could allow attackers to make logged in users update them via a CSRF attack PoC...

WordPress BitPay Checkout for WooCommerce Plugin <= 4.1.0 is vulnerable to Broken Access Control

Software BitPay Checkout for WooCommerce Type Plugin Vulnerable versions = 4.1.0 Fixed in 5.0.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41803 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 47a5398f9fa9 Credits Mika Required...

CVE-2023-3162

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. This allows unauthenticated attackers to...

WordPress plugin Stripe Payment Plugin for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2023-3162: Authentication Bypass Using an Alternate Path or Channel

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. This allows unauthenticated attackers to...

WordPress WooCommerce One Page Checkout Plugin <= 2.3.0 is vulnerable to Local File Inclusion

Software WooCommerce One Page Checkout Type Plugin Vulnerable versions = 2.3.0 Fixed in 2.4.0 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2023-35881 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID fd24b1111b74 Credits Rafie Muhammad Patchstack...

WordPress Checkout Field Editor (Checkout Manager) for WooCommerce Plugin < 1.8.0 PHP Object Injection Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:themehigh:checkoutfieldeditorforwoocommerce"; if description...

CVE-2022-4888

The Checkout Fields Manager WordPress plugin before 1.0.2, Abandoned Cart Recovery WordPress plugin before 1.2.5, Custom Fields for WooCommerce WordPress plugin before 1.0.4, Custom Order Number WordPress plugin through 1.0.1, Custom Registration Forms Builder WordPress plugin before 1.0.2,...

An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the print_panic function in repo_checkout_filter.rs.

...

PT-2023-15899 · WordPress · Checkout Fields Manager +12

Name of the Vulnerable Software and Affected Versions: Checkout Fields Manager WordPress plugin versions prior to 1.0.2 Abandoned Cart Recovery WordPress plugin versions prior to 1.2.5 Custom Fields for WooCommerce WordPress plugin versions prior to 1.0.4 Custom Order Number WordPress plugin...

CVE-2022-4888: Undefined Security Weakness

The Checkout Fields Manager WordPress plugin before 1.0.2, Abandoned Cart Recovery WordPress plugin before 1.2.5, Custom Fields for WooCommerce WordPress plugin before 1.0.4, Custom Order Number WordPress plugin through 1.0.1, Custom Registration Forms Builder WordPress plugin before 1.0.2,...

SUSE CVE-2022-47085

An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the printpanic function in repocheckoutfilter.rs...

PT-2023-26028 · Unknown · Gz Scripts Car Rental Script

Name of the Vulnerable Software and Affected Versions: GZ Scripts Car Rental Script version 1.8 Description: A problematic vulnerability has been found in the software. The issue affects an unknown function of the file...

CVE-2022-47085

An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the printpanic function in repocheckoutfilter.rs...

AZL-27654 CVE-2022-47085 affecting package rpm-ostree for versions less than 2022.1-5

An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the printpanic function in repocheckoutfilter.rs...

AZL-35219 CVE-2022-47085 affecting package rpm-ostree for versions less than 2022.1-7

An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the printpanic function in repocheckoutfilter.rs...

libostree 安全漏洞

libostree is an operating system and container binary deployment and upgrade tool open-sourced by the OSTree Project. A security vulnerability exists in versions of libostree prior to 2022.7 that originated from allowing an attacker to cause a denial of service via the printpanic function in...