CVE-2024-43944

Authentication Bypass by Spoofing vulnerability in ilyasine Maintenance & Coming Soon Redirect Animation maintenance-coming-soon-redirect-animation allows Identity Spoofing.This issue affects Maintenance & Coming Soon Redirect Animation: from n/a through = 2.3.3...

CVE-2024-43944 WordPress Maintenance & Coming Soon Redirect Animation plugin <= 2.3.3 - Bypass Vulnerability vulnerability

Authentication Bypass by Spoofing vulnerability in ilyasine Maintenance & Coming Soon Redirect Animation maintenance-coming-soon-redirect-animation allows Identity Spoofing.This issue affects Maintenance & Coming Soon Redirect Animation: from n/a through = 2.3.3...

CVE-2024-43944 WordPress Maintenance & Coming Soon Redirect Animation plugin <= 2.3.3 - Bypass Vulnerability vulnerability

Authentication Bypass by Spoofing vulnerability in ilyasine Maintenance & Coming Soon Redirect Animation maintenance-coming-soon-redirect-animation allows Identity Spoofing.This issue affects Maintenance & Coming Soon Redirect Animation: from n/a through = 2.3.3...

CVE-2024-43944

Technical details about CVE-2024-43944 are not provided in the connected documents. Monitor official advisories for affected products, impact, and fixes as they become available.

PT-2024-30805 · Unknown · Yassine Idrissi Maintenance & Coming Soon Redirect Animation

Name of the Vulnerable Software and Affected Versions: Yassine Idrissi Maintenance & Coming Soon Redirect Animation versions 2.1.3 and earlier Description: The issue is related to an Incorrect Authorization vulnerability, allowing access to functionality not properly constrained by Access Control...

CVE-2024-8211 D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R1_DiskMGR command injection

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It has been declared as critical. This...

RUSTSEC-2024-0385 `cw0` is unmaintained

The crate cw0 was first renamed to utils in 2021 and then to cw-utils because utils was already claimed on crates.io. The crate cw0 is not maintained anymore since then and should be replaced with cw-utils...

WordPress Maintenance & Coming Soon Redirect Animation Plugin <= 2.1.3 is vulnerable to Bypass Vulnerability

Software Maintenance & Coming Soon Redirect Animation Type Plugin Vulnerable versions = 2.1.3 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2024-43944 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 17bf0cc9007b Credits...

CVE-2024-43876

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...

PT-2024-26032 · Unknown · Knoxdualdarpolicy

Name of the Vulnerable Software and Affected Versions: KnoxDualDARPolicy versions prior to SMR Aug-2024 Release 1 Description: The issue is related to the improper handling of insufficient permission, allowing local attackers to access sensitive data. This could potentially lead to unauthorized...

Education in Secure Software Development

The Linux Foundation and OpenSSF released a report on the state of education in secure software development. …many developers lack the essential knowledge and skills to effectively implement secure software development. Survey findings outlined in the report show nearly one-third of all...

The vulnerability of microprogrammed logic controllers from Unitronics Vision PLC, related to incorrect handling of exceptional states, allows a intruder to trigger a malfunction in maintenance operations.

The vulnerability of microprogrammed logic controllers from Unitronics Vision PLC lies in the improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system remotely...

CVE-2024-4447

In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remoting API UserSessionAjax.getSessionList.dwr calls. While this is information that would and should be available to admins who possess "Sign In As" powers, admins who otherwise lack...

CVE-2024-4447

In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remoting API UserSessionAjax.getSessionList.dwr calls. While this is information that would and should be available to admins who possess "Sign In As" powers, admins who otherwise lack...

CVE-2024-4447

In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remoting API UserSessionAjax.getSessionList.dwr calls. While this is information that would and should be available to admins who possess "Sign In As" powers, admins who otherwise lack...

CVE-2024-4447

In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remoting API UserSessionAjax.getSessionList.dwr calls. While this is information that would and should be available to admins who possess "Sign In As" powers, admins who otherwise lack...

Change display message for users when trying to access a resource that is in maintenance

Change display message for users when trying to access a resource that is in maintenance mode...

The vulnerability of the microprogrammed software for AutomationDirect P3-550E, related to the output of operations outside the buffer in memory, allows a intruder to trigger a malfunction during maintenance.

The vulnerability of the microprogrammed software in AutomationDirect P3-550E controllers is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause malfunctions in the system...

The vulnerability of Siemens SCALANCE industrial switches, related to bypassing authentication through spoofing, allows a intruder to trigger a maintenance failure.

The vulnerability of Siemens SCALANCE industrial switches relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability can allow a malicious actor to trigger a service failure remotely...

The vulnerability of the microprogramming software for AutomationDirect P3-550E lies in the possibility of writing beyond the buffer boundaries in memory, allowing a intruder to cause malfunctions during maintenance.

The vulnerability of the microprogrammed software in AutomationDirect P3-550E controllers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause malfunctions in the system remotely...