4035 matches found
WordPress WP Secure Maintenance plugin < 1.7 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Guido Iván García Duva in WordPress Plugin WP Secure Maintenance versions 1.7...
WordPress WP Secure Maintenance Plugin < 1.7 is vulnerable to Cross Site Scripting (XSS)
Software WP Secure Maintenance Type Plugin Vulnerable versions 1.7 Fixed in 1.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4753 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0805b5b4df9d Credits Guido Iván García Duva...
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop pkthemesettings version 1.8.8 and prior versions, which stems from...
PT-2024-27126 · Prestashop +1 · Theme Settings +1
Name of the Vulnerable Software and Affected Versions: PrestaShop module "Theme settings" pk themesettings versions = 1.8.8 Description: The issue allows a guest to download a txt file containing collected email addresses when the shop is in maintenance mode, due to a lack of permissions control...
End of Sale and Renewal for XenServer Standard and Premium Editions
Cloud Software Group has decided to end of sale EOS, and end of renewal EOR XenServer Standard and Premium Edition stand-alone offerings on June 3rd, 2024. This change is designed to simplify our product line and deliver superior value and user experience to our customers. From June 3rd onwards,...
CVE-2024-36682
In the module "Theme settings" pkthemesettings = 1.8.8 from Promokit.eu for PrestaShop, a guest can download all email collected while SHOP is in maintenance mode. Due to a lack of permissions control, a guest can access the txt file which collect email when maintenance is enable which can lead t...
OESA-2024-1747 mozjs78 security update
SpiderMonkey is the code-name for Mozilla Firefox's C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript. Security Fixes: A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file...
OESA-2024-1746 mozjs78 security update
SpiderMonkey is the code-name for Mozilla Firefox's C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript. Security Fixes: Certain network request objects were freed too early when releasing a network request handle. Th...
CVE-2024-0789
The WP Maintenance plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 6.1.9.2 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to...
CVE-2024-0789
CVE-2024-0789 is a WordPress WP Maintenance plugin vulnerability where insufficient IP validation and trusting user-supplied HTTP headers allow IP spoofing to bypass maintenance mode. The flaw affects all versions up to 6.1.9.2 according to the vulnerability description. The connected Red Hat adv...
CVE-2024-0789 WP Maintenance <= 6.1.9.2 - IP Spoofing to Maintenance Mode Bypass
The WP Maintenance plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 6.1.9.2 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to...
CVE-2024-0789 WP Maintenance <= 6.1.9.2 - IP Spoofing to Maintenance Mode Bypass
The WP Maintenance plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 6.1.9.2 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to...
SUSE-FU-2024:2078-1 Feature update for rabbitmq-server313, erlang26, elixir115
This update for rabbitmq-server313, erlang26, elixir115 fixes the following issues: rabbitmq-server was implemented with a parallel versioned RPM package at version 3.13.1 jscPED-8414: - Security issues fixed: CVE-2021-22116: Fixed improper input validation that may lead to Denial of Sercice DoS...
WordPress WP Maintenance plugin <= 6.1.9.2 - IP Spoofing to Maintenance Mode Bypass vulnerability
IP Spoofing to Maintenance Mode Bypass vulnerability discovered by Hoa Le Ngoc lengochoa in WordPress Plugin WP Maintenance versions = 6.1.9.2...
WordPress WP Maintenance Plugin <= 6.1.9.2 is vulnerable to Bypass Vulnerability
Software WP Maintenance Type Plugin Vulnerable versions = 6.1.9.2 Fixed in 6.1.9.3 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-0789 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7042542977f6 Credits Hoa Le Ngoc lengochoa Required...
WordPress plugin WP Maintenance security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
SUSE SLES15: bind / bind-chrootenv / bind-devel / bind-doc / bind-utils / etc (SUSE-SU-2024:2033-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2033-1 advisory. - CVE-2023-4408: Fixed denial of service during DNS message parsing with different names bsc1219851 - CVE-2023-50387: Fixed denial ...
SUSE-SU-2024:2033-1 Security update for bind
This update for bind fixes the following issues: - CVE-2023-4408: Fixed denial of service during DNS message parsing with different names bsc1219851 - CVE-2023-50387: Fixed denial of service during DNS messages validation with DNSSEC signatures bsc1219823 - CVE-2023-50868: Fixed denial of service...