WordPress WP REST API FNS Plugin <= 1.0.0 is vulnerable to Privilege Escalation

Software WP REST API FNS Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Privilege Escalation CVE CVE-2024-49328 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID b5035012904a Credits stealthcopter Required privilege...

Taquito 安全漏洞

Taquito is ECAD open source a fast and lightweight TypeScript library . Taquito suffers from a command execution vulnerability that stems from not properly executing regular expression matches for authorized commands and parameters, which can be exploited by an attacker to execute unauthorized...

The vulnerability of Adobe Dimension’s 3D design software relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe Dimension’s 3D design software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Malicious code in snp-design-system-charts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9857 Malicious code in snp-design-system-charts (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in snap-design-systm-charts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9850 Malicious code in snap-design-systm-charts (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in snap-design-system-chrts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9849 Malicious code in snap-design-system-chrts (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in snap-design-system-charst (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9848 Malicious code in snap-design-system-charst (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in scm-design-system (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9828 Malicious code in scm-design-system (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress PublishPress Authors Plugin <= 4.7.1 is vulnerable to Privilege Escalation

Software PublishPress Authors Type Plugin Vulnerable versions = 4.7.1 Fixed in 4.7.2 OWASP Top 10 A4: Insecure Design Classification Privilege Escalation CVE CVE-2024-9215 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID dc9bff13d8f2 Credits wesley wcraft Required...

WordPress IdeaPush Plugin <= 8.69 is vulnerable to Cross Site Request Forgery (CSRF)

Software IdeaPush Type Plugin Vulnerable versions = 8.69 Fixed in 8.71 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-49275 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7462c84a9103 Credits theviper17 Required privilege...

WordPress Contact Form by Supsystic Plugin <= 1.7.28 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form by Supsystic Type Plugin Vulnerable versions = 1.7.28 Fixed in 1.7.29 OWASP Top 10 A4: Insecure Design Classification Cross Site Scripting XSS CVE CVE-2024-48046 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID cce1073296d4 Credits UKO Required privile...

GHSA-XCVC-5HGV-PHQG open-webui Insecure Direct Object Reference (IDOR) vulnerability

An Insecure Direct Object Reference IDOR vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint http://0.0.0.0:3000/api/v1/memories/id/update, where the decentralization design is flawed, allowing attackers to edit other users' memories without...

open-webui Insecure Direct Object Reference (IDOR) vulnerability

An Insecure Direct Object Reference IDOR vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint http://0.0.0.0:3000/api/v1/memories/id/update, where the decentralization design is flawed, allowing attackers to edit other users' memories without...

CVE-2024-7041

An Insecure Direct Object Reference IDOR vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint http://0.0.0.0:3000/api/v1/memories/id/update, where the decentralization design is flawed, allowing attackers to edit other users' memories without...

CVE-2024-7041 IDOR in open-webui/open-webui

An Insecure Direct Object Reference IDOR vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint http://0.0.0.0:3000/api/v1/memories/id/update, where the decentralization design is flawed, allowing attackers to edit other users' memories without...