CVE-2024-8658: Missing Authorization

The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the...

Debian DLA-1151-2 : wordpress regression update

The fix for CVE-2017-14990 issued as DLA-1151-1 was incomplete and caused a regression. It was discovered that an additional database upgrade and further code changes would be necessary. At the moment these changes are deemed as too intrusive and thus the initial patch for CVE-2017-14990 has been...

Description of the security update for SharePoint Enterprise Server 2016: October 10, 2017

None None...

openSUSE Security Update : cacti (openSUSE-2015-221)

cacti was updated to version 0.8.8c boo920399 This update fixes four vulnerabilities and adds some compatible features. - Security fixes not previously patched : - CVE-2014-2326 - XSS issue via CDEF editing - CVE-2014-2327 - Cross-site request forgery CSRF vulnerability - CVE-2014-2328 - Remote...

Backup Catalog Service does not start. Error "Can't upgrade database in readonly maintenance mode!"

Challenge This KB applies only if the "Veeam Backup Enterprise Manager" service is present. The "Veeam Backup Catalog Data Service" will not start, and the following error is found in event viewer. "Service cannot be started. Veeam.Backup.Common.CRegeneratedTraceException: Failed to start service...

Debian Security Advisory DSA 2671-1 (request-tracker4 - several vulnerabilities)

Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2012-4733 A user with the ModifyTicket right can bypass the DeleteTicket right or any custom...

DSA-2670-1 request-tracker3.8 - several

Bulletin has no description...

Debian: Security Advisory (DSA-2670-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1390

SQL injection vulnerability in the Maintenance tool in IBM Rational ClearQuest 7.1.1.x before 7.1.1.9, 7.1.2.x before 7.1.2.6, and 8.x before 8.0.0.2 allows remote attackers to execute arbitrary SQL commands by leveraging an error in the user-database upgrade feature...

CVE-2011-1390: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Maintenance tool in IBM Rational ClearQuest 7.1.1.x before 7.1.1.9, 7.1.2.x before 7.1.2.6, and 8.x before 8.0.0.2 allows remote attackers to execute arbitrary SQL commands by leveraging an error in the user-database upgrade feature...

Fedora 15 : drupal7-7.4-1.fc15 (2011-8878)

Remember to log in as user 1 prior to the RPM update, to perform the DB upgrade via http://yoursite/update.php. - Advisory ID: DRUPAL-SA-CORE-2011-002 - Project: Drupal core 1 - Version: 7.x - Date: 2011-JUNE-29 - Security risk: Highly critical 2 - Exploitable from: Remote - Vulnerability: Access...

Mandriva Update for f-spot MDVA-2008:169 (f-spot)

Check for the Version of f-spot OpenVAS Vulnerability Test Mandriva Update for f-spot MDVA-2008:169 f-spot Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Unintentionally logging credit card transactions

Solar Designer of the Openwall Project reported a security vulnerability in the contributed authorizenet module which is part of the ecommerce package. Credit card information was being stored in a system log file. The system should not be saving this information. Versions affected Please check t...

DSA-562-2 mysql - several vulnerabilities

Bulletin has no description...

phpMyBackupPro < 1.0.0 Unspecified Input Validation Issues

The remote host seems to be using phpMyBackupPro. It is reported that the remote version of this software is prone to multiple security weaknesses regarding user input validation. An attacker may use these issues to gain access to the application or to access the underlying database. %NASLMINLEVE...

Moderate: Red Hat Security Advisory: : Updated slocate packages fix vulnerability

Updated slocate packages are now available that fix a heap overflow vulnerability. Slocate is a security-enhanced version of locate, designed to find files on a system via a central database. Patrik Hornik discovered a vulnerability in Slocate versions up to and including 2.7 where a carefully...

vBulletin calendar.php eventid Parameter SQL Injection

A vulnerability has been discovered in the 'calendar.php' script that allows unauthorized users to inject SQL commands through the 'eventid' parameter. An attacker may use this flaw to gain the control of the remote database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From:...

[SECURITY] [DSA 165-1] New PostgreSQL packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 12th, 2002 http://www.debian.org/security/faq -...

ASI Oracle Security Alert: CHOWN Path Environment Variable Vulnerability

CHOWN Path Environment Variable Vulnerability For additional details, the official advisories from Oracle Corporation can be downloaded from: http://otn.oracle.com/deploy/security/pdf/dbsmpalert.pdf Summary: The vulnerability only affects Oracle 8.0.5 and 8.1.5. The dbsnmp file executes the CHOWN...