CVE-2022-3026 WP Users Exporter <= 1.4.2 - CSV Injection

The WP Users Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.2 via the 'Export Users' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add untrusted input into profile information like First Names that...

CVE-2022-2433 WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input via the 'almrepeatersexport' parameter in versions up to, and including 5.5.3. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they...

CVE-2022-2429 Ultimate SMS Notifications for WooCommerce <= 1.4.1 - CSV Injection

The Ultimate SMS Notifications for WooCommerce plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.1 via the 'Export Utility' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add untrusted input into billing...

WordPress plugin WP Users Exporter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress plugin Ultimate SMS Notifications for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2022-5124 · WordPress · Ultimate Sms Notifications For Woocommerce

Name of the Vulnerable Software and Affected Versions: Ultimate SMS Notifications for WooCommerce plugin for WordPress versions up to, and including, 1.4.1 Description: The issue is related to a CSV Injection vulnerability in the 'Export Utility' functionality. This allows authenticated attackers...

CVE-2022-38367

The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint...

CVE-2022-38367

The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint...

CVE-2022-38367

The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint...

Authorization

The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint...

CVE-2022-38367

The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint...

CVE-2022-38367

CVE-2022-38367 affects the Netic User Export add-on for Atlassian Jira (pre-2.0.6). The root cause is missing authorization checks on the affected endpoint, enabling an unauthenticated user to export all Jira users via an HTTP request. Impact is explicit in the sources: potential exposure of user...

PT-2022-24389 · Atlassian · Netic User Export +1

Name of the Vulnerable Software and Affected Versions: Netic User Export add-on for Atlassian Jira versions prior to 2.0.6 Description: The issue is related to the lack of authorization checks in the Netic User Export add-on. This might allow an unauthenticated user to export all users from Jira ...

Atlassian Jira 安全漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is mainly used to track and manage various types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira versions prior to 2.0.6 that stems from the Netic User Export plugi...

NinjaForms < 3.6.13 - Admin+ PHP Objection Injection

The plugin unserialises the content of an imported file, which could lead to PHP object injections issues when an admin import intentionally or not a malicious file and a suitable gadget chain is present on the blog. To simulate a gadget chain, put the following code in a plugin class Evil public...

CVE-2022-22100

Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto...

Memory corruption

Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto...

CVE-2022-22100

Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto...

CVE-2022-22100

CVE-2022-22100 : Qualcomm Snapdragon Auto memory corruption in multimedia due to an improper check on received export descriptors. Affected component is the multimedia export-descriptor handling in Snapdragon Auto. Root cause: memory corruption from boundary/descriptor validation issue. Impact: h...

PT-2022-15236 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in multimedia due to an improper check on received export descriptors. Recommendations: At the moment, there is no information abo...