AZL-33505 CVE-2024-20967 affecting package mysql for versions less than 8.0.36-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

AZL-38743 CVE-2023-45234 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or...

Pleasanter Cross-Site Scripting Vulnerability

Pleasanter is a free OSS no-code/low-code development tool from Pleasanter. A security vulnerability exists in Pleasanter 1.3.49.0 and prior versions, which stems from the presence of a cross-site scripting XSS vulnerability that can be exploited by an attacker to lure a user into visiting the...

WordPress Plugin MailMunch Constant Contact Forms Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2024-21597

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions. In an Abstracted Fabric AF scenario if routing-instances RI are...

CVE-2024-20711 Adobe Substance 3D Stager v2.1.1 Vulnerability VII

Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

Zentao Security Breach

Nature Easy Soft Network Technology ZenTao is China's easy soft Tianchuang network technology Nature Easy Soft Network Technology company's open source project management software. The software includes product management, project management, quality management and document management functions. ...

WordPress Plugin Formidable Forms Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

EDK2 Buffer Error Vulnerability

EDK2 is a set of cross-platform firmware development environments from the Tianocore community based on the UEFI and PI specifications. A security vulnerability exists in EDK2 202311 and earlier versions, which stems from a buffer overflow vulnerability in the Tcg2MeasureImage function...

PT-2024-14116 · WordPress · Wp Optin Wheel

Name of the Vulnerable Software and Affected Versions: WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce versions 1.4.3 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This affects the WP Optin Wheel...

PT-2024-14114 · WordPress · Fastdup

Name of the Vulnerable Software and Affected Versions: FastDup – Fastest WordPress Migration & Duplicator versions 2.1.7 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to...

PT-2024-14423 · Unknown · Send Users Email

Name of the Vulnerable Software and Affected Versions: Send Users Email versions 1.4.3 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This affects the Send Users Email functionality. Recommendations: For versions 1.4.3 and earlier,...

PyCryptodome Security Vulnerabilities

PyCryptodome is a standalone Python low-level cryptographic primitive package from the individual developer Helder Eijs. A security vulnerability exists in PyCryptodome versions prior to 3.19.1, which stems from a side-channel leak in OAEP decryption...

SAMSUNG mobile devices path traversal vulnerability

SAMSUNG mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A path traversal vulnerability exists in SAMSUNG mobile devices SMR Jan-2024 Release 1 version and earlier versions, which stems from a path traversal...

CVE-2023-47473

Directory Traversal vulnerability in fuwushe.org iFair versions 23.8ad0 and before allows an attacker to obtain sensitive information via a crafted script...

jeecg security breach

jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in JEECG version 4.0 and earlier versions. An attacker exploited the vulnerability to execute arbitrary code via a specially crafted POST request...

iFair Security Breach

Enterprise Voice iFair is an enterprise management software from Enterprise Voice. A security vulnerability exists in iFair version 23.8ad0 and prior versions. An attacker could exploit the vulnerability to obtain sensitive information via specially crafted scripts...

jeecg security breach

jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot 3.5.3 and earlier versions, which stems from a SQL injection vulnerability in component /sys/replicate/check...

PT-2023-31798 · Unknown · Rise Blocks

Name of the Vulnerable Software and Affected Versions: Rise Blocks – A Complete Gutenberg Page Builder versions 3.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actio...

GM Information Technologies MDO SQL Injection Vulnerability

GM Information Technologies MDO is a versatile data management platform from GM Information Technologies, Turkey. GM Information Technologies MDO 20231229 and prior versions are vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability...