1577 matches found
CVE-2024-38723 WordPress Get Use APIs – JSON Content Importer plugin <= 1.5.6 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Bernhard Kux JSON Content Importer.This issue affects JSON Content Importer: from n/a through 1.5.6...
CVE-2024-38723
CVE-2024-38723 is a Server-Side Request Forgery (SSRF) in Bernhard Kux JSON Content Importer affecting WordPress JSON Content Importer
PT-2024-28169 · Unknown · Bernhard Kux Json Content Importer
Name of the Vulnerable Software and Affected Versions: Bernhard Kux JSON Content Importer versions 1.5.6 and earlier Description: A Server-Side Request Forgery SSRF issue has been identified. This allows an attacker to forge requests from the server, potentially leading to unauthorized access to...
CVE-2024-6599
The Meks Video Importer plugin for WordPress is vulnerable to unauthorized API key modification due to a missing capability check on the ajaxsavesettings function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with Subscriber-level access and...
CVE-2024-6599 Meks Video Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) API Keys Modification
The Meks Video Importer plugin for WordPress is vulnerable to unauthorized API key modification due to a missing capability check on the ajaxsavesettings function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with Subscriber-level access and...
CVE-2024-6599
The CVE affects Meks Video Importer for WordPress. Root cause: missing capability check in ajax_save_settings allows authenticated users with Subscriber+ to modify plugin API keys in all versions up to 1.0.11. Impact: unauthorized API key modification could enable misuse of the plugin’s API keys....
PT-2024-37747 · WordPress · Meks Video Importer
Name of the Vulnerable Software and Affected Versions: Meks Video Importer plugin for WordPress versions up to, and including, 1.0.11 Description: The issue arises from a missing capability check on the ajax save settings function, allowing authenticated attackers with Subscriber-level access and...
WordPress Meks Video Importer plugin <= 1.0.12 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Meks Video Importer versions = 1.0.12...
WordPress Get Use APIs – JSON Content Importer plugin <= 1.5.6 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin JSON Content Importer versions = 1.5.6...
WordPress Meks Video Importer Plugin <= 1.0.12 is vulnerable to Broken Access Control
Software Meks Video Importer Type Plugin Vulnerable versions = 1.0.12 Fixed in 1.0.13 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38733 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 55873b8587e6 Credits Majed Refaea Required...
CBL Mariner 2.0 Security Update: containerized-data-importer / cri-o / ig / libcontainers-common / skopeo (CVE-2024-3727)
The version of containerized-data-importer / cri-o / ig / libcontainers-common / skopeo installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-3727 advisory. - A flaw was found in the...
WordPress JSON Content Importer Plugin <= 1.5.6 is vulnerable to Server Side Request Forgery (SSRF)
Software JSON Content Importer Type Plugin Vulnerable versions = 1.5.6 Fixed in 1.6.0 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-38723 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID f916d2cf2c68 Credits...
CVE-2024-3727 affecting package containerized-data-importer for versions less than 1.55.0-19
CVE-2024-3727 affecting package containerized-data-importer for versions less than 1.55.0-19. A patched version of the package is available...
SUSE CVE-2020-28594
A use-after-free vulnerability exists in the 3MFImporter::handleendmodel functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-3727 affecting package containerized-data-importer for versions less than 1.57.0-2
CVE-2024-3727 affecting package containerized-data-importer for versions less than 1.57.0-2. A patched version of the package is available...
MAL-2024-6332 Malicious code in abstract-importer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in abstract-importer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in glovo-data-platform-importer-brain (PyPI)
--- -= Per source details. Do not edit below this line.=-...