1116 matches found
PT-2024-13345 · Macpaw · The Unarchiver
Name of the Vulnerable Software and Affected Versions: MacPaw The Unarchiver versions prior to 4.3.6 Description: The issue is related to missing quarantine attributes for extracted items. This could potentially lead to security risks as extracted items may not be properly flagged for inspection ...
MacPaw 安全漏洞
MacPaw is a Mac-specific decompression application from MacPaw, Inc. A security vulnerability exists in MacPaw versions prior to 4.3.6, which stems from a vulnerability in Unarchiver that contains a vulnerability related to the lack of an isolation attribute for extracted items...
CVE-2024-3672
The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and including, 1.6.8 due to insufficient input sanitization and output escaping on user supplied attributes such as 'classes'. This makes it...
WordPress Plugin Link Whisper Free 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2024-21585 · WordPress · Link Whisper Free
Name of the Vulnerable Software and Affected Versions: Link Whisper Free plugin for WordPress versions up to, and including, 0.7.1 Description: The issue allows authenticated attackers with contributor-level access and above to inject a PHP Object via deserialization of untrusted input of the...
SUSE SLES12 Security Update : zabbix (SUSE-SU-2024:0862-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0862-1 advisory. - CVE-2024-22119: Fixed ability to run XSS in graph item names bsc1219775. Tenable has extracted the preceding description block directly fr...
CVE-2023-33676
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=" which can be escalated to the remote command execution...
BIT-GITLAB-2023-3443 Incorrect Authorization in GitLab
An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for a Guest user to add an emoji on confidential work items...
BIT-JENKINS-2021-21670
Jenkins LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission...
CVE-2023-33677
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...
CVE-2023-33677
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...
PT-2024-12436
Name of the Vulnerable Software and Affected Versions Sourcecodester Lost and Found Information System version 1.0 Description The issue is related to unauthenticated SQL Injection. The vulnerability can be exploited at the API endpoint "?page=items/view&id=". This allows for potential manipulati...
GitLab Authorization Issues Vulnerability
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. An authorization issue exists in GitLab where a user with the role of "Guest"...
CVE-2024-1512
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insufficient escaping on the user supplied...
WordPress Plugin MasterStudy LMS WordPress Plugin Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2024-22119
The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...
CVE-2024-22119
The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...
CVE-2024-22119
The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...
