WordPress plugin Coming soon and Maintenance mode 跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Coming soon and Maintenance mode has a cross-site request forgery vulnerability, the vulnerability originates from the plugi...

WordPress plugin Coming soon and Maintenance mode 安全漏洞

WordPress is the WordPress Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. The vulnerability is caused by the plugin's unauthorized and CSRF-checked in its comingsoonsendma...

CVE-2022-0199: Cross-Site Request Forgery (CSRF)

The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its comingsoonsendmail AJAX action, allowing attackers to make logged in admin to send arbitrary emails to all subscribed users via a CSRF attack...

CVE-2022-0164: Cross-Site Request Forgery (CSRF)

The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not have authorisation and CSRF checks in its comingsoonsendmail AJAX action, allowing any authenticated users, with a role as low as subscriber to send arbitrary emails to all subscribed users...

Security Bulletin: Security vulnerability in WebSphere Application Server shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-38951)

Summary IBM WebSphere Application Server is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. WebSphere Application Server is vulnerable to a denial of service. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

Security Bulletin: Multiple security vulnerabilities may affect IBM DB2 shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises(CVE-2021-38931, CVE-2021-29678, CVE-2021-20373, CVE-2021-39002, CVE-2021-38926)

Summary IBM DB2 is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. Information about security vulnerabilities affecting DB2 has been published in multiple security bulletins as below. The recommended solution is to upgrade to Fix Pack version...

CVE-2021-46108

D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...

CVE-2021-46108

D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...

CVE-2021-46108

D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...

Design/Logic Flaw

D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...

CVE-2021-46108

D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...

PT-2022-28538

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.19 Description The issue concerns the use of mm ops indirection for cache maintenance in the KVM arm64 pkvm. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

CVE-2021-46108: Improper Neutralization of Input During Web Page Generation

D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...

GHSA-J57W-3C39-GPP5 Improper Privilege Management in Snipe-IT

An unprivileged user of Snipe-IT prior to version 5.3.11 can create maintenance for an asset. Version 5.3.11 contains a patch for this issue...

Improper Privilege Management in Snipe-IT

An unprivileged user of Snipe-IT prior to version 5.3.11 can create maintenance for an asset. Version 5.3.11 contains a patch for this issue...

D-Link Dsl-2730E 跨站脚本漏洞

D-Link Dsl-2730E is a wireless modem router from D-Link, China. D-Link DSL-2730E CT-20131125 is vulnerable to a cross-site scripting vulnerability that allows XSS to access the password page in the maintenance configuration via the username parameter. No details of the vulnerability are currently...

PT-2022-1649

Name of the Vulnerable Software and Affected Versions D-Link DSL-2730E CT-20131125 Description The issue allows for cross-site scripting XSS attacks via the username parameter to the password page in the maintenance configuration. This is due to a lack of protection measures for the web page...

snipe-it elevation of privilege vulnerability

Snipe-IT is an open source IT asset/license management system. snipe-it versions prior to 5.3.11 contain an elevation of privilege vulnerability that stems from improper privilege management in the software. An attacker could exploit the vulnerability to cause a non-privileged user to create...

Security Bulletin: Security vulnerability in WebSphere Application Server shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-20517)

Summary IBM WebSphere Application Server ND shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises is vulnerable to a Directory Traversal vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

Security Bulletin: Security vulnerability in WebSphere Application Server shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-29754)

Summary IBM WebSphere Application Server is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. WebSphere Application Server is vulnerable to a Privilege Escalation vulnerability. Vulnerability Details Refer to the security bulletins listed in the...