9550 matches found
`rsa-export` is unmaintained
This crate has been deprecated in favour of using the native support for exporting RSA keys into the standard PEM format. See docs.rs documentation. In addition to that, the operations in this crate arithmetic and Base64 encoding are not done in constant-time, potentially exposing the user to...
WordPress WP Import Export Lite & WP Import Export plugin <= 3.9.26 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Trình Vũ / Sonicrrrr from VNPT-VCI Patchstack Alliance in WordPress Plugin WP Import Export Lite versions = 3.9.26...
WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Products, Order & Customers Export for WooCommerce versions = 2.0.8...
WordPress Advanced Order Export For WooCommerce plugin <= 3.4.4 - Remote Code Execution vulnerability
Remote Code Execution vulnerability discovered by movrment Patchstack Alliance in WordPress Plugin Advanced Order Export For WooCommerce versions = 3.4.4...
WordPress LearnPress Export Import plugin <= 4.0.3 - Admin+ SQL Injection vulnerability
Admin+ SQL Injection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin LearnPress Export Import versions = 4.0.3...
WordPress Comments Import & Export plugin <= 2.3.5 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin WordPress Comments Import & Export versions = 2.3.5...
WordPress WP Import Export Lite Plugin <= 3.9.26 is vulnerable to PHP Object Injection
Software WP Import Export Lite Type Plugin Vulnerable versions = 3.9.26 Fixed in 3.9.27 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-31308 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID 6bc80ca274a7 Credits Trình Vũ Sonicrrrr from VNPT-VCI...
WordPress LearnPress Export Import Plugin <= 4.0.3 is vulnerable to SQL Injection
Software LearnPress Export Import Type Plugin Vulnerable versions = 4.0.3 Fixed in 4.0.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-31241 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 0bd547fb213e Credits Le Ngoc Anh Required privilege...
WordPress WordPress Comments Import & Export Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)
Software WordPress Comments Import & Export Type Plugin Vulnerable versions = 2.3.5 Fixed in 2.3.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31235 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8fb386b6b6f3 Credits...
CVE-2024-25007
Ericsson Network Manager ENM, versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosure. There is limited impact to integrity and availability. The...
CVE-2024-25007 Ericsson Network Manager - Improper Neutralization of Formula Elements Vulnerability
Ericsson Network Manager ENM, versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosure. There is limited impact to integrity and availability. The...
PT-2024-22875 · Projeqtor · Projeqtor
Name of the Vulnerable Software and Affected Versions: projeqtor versions up to 11.2.0 Description: The issue is related to a SQL injection vulnerability via the component /view/criticalResourceExport.php. This vulnerability allows for potential exploitation. Recommendations: For versions up to...
Import Export WordPress Users < 2.5.3 - Authenticated (Shop Manager+) Path Traversal
Description The Export and Import Users and Customers plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.5.2. This makes it possible for authenticated attackers, with shop manager-level access and above, to read the contents of arbitrary files on the...
Projeqtor SQL注入漏洞
Projeqtor is an open source PHP-based project management software from the Projeqtor community. The software is used to organize various functions required for multiple projects and is suitable for IT projects. An SQL injection vulnerability exists in Projeqtor version 11.2.0 and earlier, which...
PT-2024-20696 · Ericsson · Ericsson Network Manager
Name of the Vulnerable Software and Affected Versions: Ericsson Network Manager ENM versions prior to 23.1 Description: The issue is related to the export function of the application log, where improper neutralization of formula elements in a CSV file can lead to code execution or information...
CVE-2023-38729
IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to sensitive information disclosure when using ADMINCMD with IMPORT or EXPORT...
CVE-2023-38729 IBM Db2 information disclosure
IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to sensitive information disclosure when using ADMINCMD with IMPORT or EXPORT...
PT-2024-12763 · Ibm · Ibm Db2
Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue concerns sensitive information disclosure when using ADMIN CMD with IMPORT or EXPORT. This affects the specified versions of...
IBM Db2 信息泄露漏洞
IBM Db2 is a relational database management system from International Business Machines IBM. The system executes on UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from an information disclosure vulnerability that originates when ADMINCMD is used in conjunction with IMPORT o...
