Security Bulletin: IBM Spectrum Scale (GPFS) Hadoop connector is affected by a security vulnerability (CVE-2022-25168)

Summary A security vulnerability has been identified in the IBM Spectrum Scale GPFS Hadoop connector which could allow a local authenticated attacker to execute arbitrary commands on the system. Fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-25168 DESCRIPTION: Apach...

Qualys Broadens Security Offerings for Oracle Cloud Infrastructure

As organizations increase their use of public cloud platforms, they encounter cloud-specific security and compliance threats, which can be challenging to address without the right tools and processes. Organizations’ cloud security difficulties lie in two main areas: Lack of visibility into their...

CVE-2022-42698

Unauth. Arbitrary File Upload vulnerability in WordPress Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...

CVE-2022-42698

Unauth. Arbitrary File Upload vulnerability in WordPress Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...

CVE-2022-42497

Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...

CVE-2022-42497

Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...

Remote code execution

Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...

CVE-2022-42698

CVE-2022-42698 affects the WordPress plugin Api2Cart Bridge Connector (versions ≤ 1.1.0). The root cause is an unauthenticated Arbitrary File Upload due to insufficient input/file validation in the plugin, enabling an attacker to upload arbitrary files via the vulnerable endpoint. Impact is high:...

CVE-2022-42497 WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...

CVE-2022-42497

The CVE-2022-42497 entry concerns the WordPress plugin Api2Cart Bridge Connector (versions ≤ 1.1.0). The attacked component is the plugin’s code path that enables Arbitrary Code Execution. Public sources indicate the vulnerability can be triggered to execute code on affected sites (some reference...

PT-2022-26507 · WordPress · Wordpress Api2Cart Bridge Connector

Name of the Vulnerable Software and Affected Versions: WordPress Api2Cart Bridge Connector plugin version 1.1.0 and earlier Description: The issue concerns an Unauth. Arbitrary File Upload vulnerability. Recommendations: For WordPress Api2Cart Bridge Connector plugin version 1.1.0 and earlier,...

WordPress plugin Api2Cart Bridge Connector 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Api2Cart Bridge Connector SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2022-26459 · Unknown · Api2Cart Bridge Connector

Name of the Vulnerable Software and Affected Versions: Api2Cart Bridge Connector plugin version 1.1.0 and earlier Description: The issue is related to an Arbitrary Code Execution vulnerability. Recommendations: For Api2Cart Bridge Connector plugin version 1.1.0 and earlier, update to a version...

GHSA-HFFX-R282-W2G9 Path Traversal in Liferay Portal

A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 before update 6, and 7.4 before update 19 allows attackers to create or overwrite existing files on the filesystem via the installation of a malicious Elasticsearch Sidecar plugin...

Path Traversal in Liferay Portal

A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 before update 6, and 7.4 before update 19 allows attackers to create or overwrite existing files on the filesystem via the installation of a malicious Elasticsearch Sidecar plugin...

CVE-2022-42123

A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 before update 6, and 7.4 before update 19 allows attackers to create or overwrite existing files on the filesystem via the installation of a malicious Elasticsearch Sidecar plugin...

Design/Logic Flaw

A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 before update 6, and 7.4 before update 19 allows attackers to create or overwrite existing files on the filesystem via the installation of a malicious Elasticsearch Sidecar plugin...

PT-2022-26269 · Elastic +1 · Elasticsearch +4

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.3.3 through 7.4.3.18 Liferay DXP versions 7.3 before update 6 Liferay DXP versions 7.4 before update 19 Description: A Zip slip vulnerability in the Elasticsearch Connector allows attackers to create or overwrite...

CVE-2022-42123

A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 before update 6, and 7.4 before update 19 allows attackers to create or overwrite existing files on the filesystem via the installation of a malicious Elasticsearch Sidecar plugin...