9543 matches found
Design/Logic Flaw
The Login Lockdown – Protect Login Form plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the generateexportfile function in all versions up to, and including, 2.08. This makes it possible for authenticated attackers, with subscriber access and...
Mattermost Security Vulnerabilities
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from the inability to check if compliance export is enabled when fetching posts from a public channel, allowing users who are not members of...
libming 安全漏洞
libming is a Flash SWF output library written in C. It can be used as a library to export Flash SWF files to other languages. A memory disclosure vulnerability exists in the libming parseSWFTEXTRECORD function, which can be exploited by an attacker to cause a denial of service...
PT-2024-18394 · Mattermost · Mattermost
Name of the Vulnerable Software and Affected Versions: Mattermost versions prior to 8.1.9 Description: Mattermost fails to check if compliance export is enabled when fetching posts of public channels, allowing a user that is not a member of the public channel to fetch the posts, which will not be...
WordPress Plugin Login Lockdown Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
libming 安全漏洞
libming is a Flash SWF output library written in C. It can be used as a library to export Flash SWF files to other languages. A memory leak vulnerability exists in libming, which arises from the parseSWFFREECHARACTER function not freeing or failing to free dynamically allocated heap memory, and c...
CVE-2024-0551
Enable exports of the database and associated exported information of the system via the default user role. The attacked would have to have been granted access to the system prior to the attack. It is worth noting that the deterministic nature of the export name is lower risk as the UI for...
Design/Logic Flaw
Enable exports of the database and associated exported information of the system via the default user role. The attacked would have to have been granted access to the system prior to the attack. It is worth noting that the deterministic nature of the export name is lower risk as the UI for...
CVE-2024-0551
CVE-2024-0551 describes an access-control error that allows exporting the database and related data via the default user role for users with prior system access. The export mechanism uses a deterministic name, and the download is initiated by the UI before the export is deleted from the system, i...
CVE-2024-0551 Download and export of file via default user role
Enable exports of the database and associated exported information of the system via the default user role. The attacked would have to have been granted access to the system prior to the attack. It is worth noting that the deterministic nature of the export name is lower risk as the UI for...
CVE-2024-0551 Download and export of file via default user role
Enable exports of the database and associated exported information of the system via the default user role. The attacked would have to have been granted access to the system prior to the attack. It is worth noting that the deterministic nature of the export name is lower risk as the UI for...
CVE-2024-0551 Download and export of file via default user role
Enable exports of the database and associated exported information of the system via the default user role. The attacked would have to have been granted access to the system prior to the attack. It is worth noting that the deterministic nature of the export name is lower risk as the UI for...
CVE-2024-22543
An issue was discovered in Linksys Router E1700 1.0.04 build 3, allows authenticated attackers to escalate privileges via a crafted GET request to the /goform/ URI or via the ExportSettings function...
Linksys E1700 Security Breach
Linksys E1700 is a wireless router from Linksys USA. A security vulnerability exists in Linksys E1700 version 1.0.04. An attacker can exploit the vulnerability to escalate privileges via a specially crafted GET request to the /goform/ URI or via the ExportSettings function...
AnythingLLM Access Control Error Vulnerability
AnythingLLM is a document chatbot that meets business requirements. An access control error vulnerability exists in AnythingLLM. An attacker could use this vulnerability to gain access to the system and export database information...
PT-2024-15651 · Git +2 · Anything-Llm +1
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows exports of the database and associated exported information of the system via the default user role. An attacker would need to have been granted access to the system prior...
Thank You Page Customizer for WooCommerce – Increase Your Sales < 1.1.3 - Missing Authorization to Authenticated (Subscriber+) Data Export
Description The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to missing authorization e in all versions up to, and including, 1.1.2 via the applylayout function due to a missing capability check. This makes it possible for authenticated...
CVE-2023-51828
A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers to execute arbitrary SQL commands via the query parameter in getnextnotice function...
CVE-2023-51828
A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers to execute arbitrary SQL commands via the query parameter in getnextnotice function...