WordPress plugin Light Poll 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-6496: Cross-Site Request Forgery (CSRF)

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks when deleting polls, which could allow attackers to make logged in users perform such action via a CSRF attack...

WordPress Light Poll plugin <= 1.0.0 - Poll Answers Deletion via CSRF vulnerability

Poll Answers Deletion via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin Light Poll versions = 1.0.0...

WordPress Light Poll Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Light Poll Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-6720 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 167c407c922d Credits Vuln Seeker Cybersecurity...

Brave Desktop 1.67.123 Security Fixes

Fixed unreadable button labels on certain YubiKey modals when using light theme. Upgraded Chromium to 126.0.6478.126 — refer to Google Chrome advisories for inherited CVEs...

CVE-2024-32081

Missing Authorization vulnerability in Websupporter Filter Custom Fields & Taxonomies Light.This issue affects Filter Custom Fields & Taxonomies Light: from n/a through 1.05...

CVE-2024-32081

Missing Authorization vulnerability in Websupporter Filter Custom Fields & Taxonomies Light.This issue affects Filter Custom Fields & Taxonomies Light: from n/a through 1.05...

CVE-2024-32081: Missing Authorization

Missing Authorization vulnerability in Websupporter Filter Custom Fields & Taxonomies Light.This issue affects Filter Custom Fields & Taxonomies Light: from n/a through 1.05...

PT-2024-24386

Name of the Vulnerable Software and Affected Versions Filter Custom Fields & Taxonomies Light versions n/a through 1.05 Description The issue is related to a Missing Authorization vulnerability in Websupporter Filter Custom Fields & Taxonomies Light. Recommendations For versions n/a through 1.05,...

RHEL 6 : ocaml-xml-light (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ocaml-xml-light: hash table collisions CPU usage DoS CVE-2012-3514 Note that Nessus has not tested for this issue b...

CVE-2024-34411

Unrestricted Upload of File with Dangerous Type vulnerability in Thomas Scholl canvasio3D Light.This issue affects canvasio3D Light: from n/a through 2.5.0...

WordPress plugin canvasio3D Light 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

CVE-2024-34411: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Thomas Scholl canvasio3D Light.This issue affects canvasio3D Light: from n/a through 2.5.0...

CVE-2024-34411 WordPress canvasio3D Light plugin <= 2.5.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Thomas Scholl canvasio3D Light.This issue affects canvasio3D Light: from n/a through 2.5.0...

CVE-2024-34411 WordPress canvasio3D Light plugin <= 2.5.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Thomas Scholl canvasio3D Light.This issue affects canvasio3D Light: from n/a through 2.5.0...

PT-2024-25863 · Unknown · Canvasio3D Light

Name of the Vulnerable Software and Affected Versions: canvasio3D Light versions n/a through 2.5.0 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type. This allows for the upload of files that could potentially be dangerous. Recommendations: For versions n/a...

WordPress canvasio3D Light plugin <= 2.5.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin canvasio3D Light versions = 2.5.0...

WordPress canvasio3D Light Plugin <= 2.5.0 is vulnerable to Arbitrary File Upload

Software canvasio3D Light Type Plugin Vulnerable versions = 2.5.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-34411 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 294d2307b501 Credits stealthcopter Required privilege...

SUSE CVE-2024-27021

In the Linux kernel, the following vulnerability has been resolved: r8169: fix LED-related deadlock on module removal Binding devmledclassdevregister to the netdev is problematic because on module removal we get a RTNL-related deadlock. Fix this by avoiding the device-managed LED functions. Note:...

UBUNTU-CVE-2024-27021

In the Linux kernel, the following vulnerability has been resolved: r8169: fix LED-related deadlock on module removal Binding devmledclassdevregister to the netdev is problematic because on module removal we get a RTNL-related deadlock. Fix this by avoiding the device-managed LED functions. Note:...