1193 matches found
Market Exporter < 2.0.20 - Missing Authorization to Arbitrary File Deletion
Description The Market Exporter plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'removefiles' function in all versions up to, and including, 2.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above,...
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: nri-mssql, dagger, kube-logging-operator, cert-exporter-fips, glab, nerdctl, thanos, velero-fips, ctop, loki, wait-for-port, kots, ferretdb, newrelic-nri-kube-events, prometheus-node-exporter, prometheus-alertmanager-fips, k8s-device-plugin, cert-exporter, vt-cli, yq...
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: addon-resizer-fips, cass-operator-fips, fulcio-fips, karpenter, step, cert-exporter-fips, dive, glab, newrelic-infra-operator, influx, nats-server, multus-cni, prometheus-mysqld-exporter, thanos, prometheus-beat-exporter-fips, ctop, actions-runner-controller-fips,...
SUSE-SU-2024:1532-1 Security update for SUSE Manager Server 4.3
This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.12 Monitoring: Node exporter upgraded to 1.7.0 Automatic migration from Salt 3000 to the Salt Bundle New update-salt recurring state uyuni-proxy-systemd-services package has been added to proxy channel...
Fedora 40 : golang-github-prometheus-node-exporter (2023-654e0ddfd8)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-654e0ddfd8 advisory. Automatic update for golang-github-prometheus-node-exporter-1.6.1-1.fc40. Changelog Thu Nov 9 2023 Mikel Olasagasti Uranga - 1.6.1-1 - Update to 1.6...
Aspose.Words Exporter <= 6.3.1 - Missing Authorization
Description The Aspose.Words – Import and Export word documents plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 6.3.1. This makes it possible for authenticated attackers, with subscriber-level access a...
WordPress Aspose.Words Exporter Plugin <= 6.3.1 is vulnerable to Broken Access Control
Software Aspose.Words Exporter Type Plugin Vulnerable versions = 6.3.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32146 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 11984c3d7834 Credits Abdi Pranata Required...
CVE-2024-31342 WordPress Gallery Exporter plugin <= 1.3 - Arbitrary File Download vulnerability
Missing Authorization vulnerability in WPcloudgallery WordPress Gallery Exporter.This issue affects WordPress Gallery Exporter: from n/a through 1.3...
CVE-2024-31342
CVE-2024-31342 is a Missing Authorization vulnerability for the WordPress plugin WordPress Gallery Exporter (also referred to as WPcloudgallery WP Gallery Exporter), with affected versions listed as from n/a through 1.3. The Red Hat entry and Patchstack reference confirm the issue is tied to Word...
PT-2024-23985 · WordPress · Wordpress Gallery Exporter
Name of the Vulnerable Software and Affected Versions: WordPress Gallery Exporter versions 1.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in the WPcloudgallery WordPress Gallery Exporter. This vulnerability affects the WordPress Gallery Exporter plugin...
WordPress Plugin WordPress Gallery Exporter 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
WordPress Gallery Exporter <= 1.3 - Authenticated (Administrator+) Arbitrary File Download
Description The WordPress Gallery Exporter – Export your NextGen, Envira and FooGallery galleries to your computer plugin for WordPress is vulnerable to arbitrary file downloads in all versions up to, and including, 1.3. This is due to the plugin improperly validating the path to requested file...
WordPress Gallery Exporter plugin <= 1.3 - Arbitrary File Download vulnerability
Arbitrary File Download vulnerability discovered by Abdi Prawira Negara Patchstack Alliance in WordPress Plugin WordPress Gallery Exporter versions = 1.3...
WordPress WordPress Gallery Exporter Plugin <= 1.3 is vulnerable to Arbitrary File Download
Software WordPress Gallery Exporter Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2024-31342 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6307ae9c3c1f Credits Abdi Prawira Negara...
AZL-38473 CVE-2023-45288 affecting package prometheus-node-exporter for versions less than 1.7.0-2
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
Fedora: Security Advisory for prometheus-podman-exporter (FEDORA-2024-45f0a1df95)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-a8a4ce2864)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-9231308a4f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
