Avada < 7.11.7 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing

Description The Avada theme for WordPress is vulnerable to Sensitive Information Exposure via the '/wp-content/uploads/fusion-forms/' directory. This makes it possible for unauthenticated attackers to extract sensitive data uploaded via an Avada created form with a file upload mechanism. PoC Acce...

GHSA-2VGG-9H6W-M454 Bypassing Rate Limit and Brute Force Protection Using Cache Overflow

Summary An attacker can effectively bypass the rate limit and brute force protections by exploiting the application's weak cache-based mechanism. This loophole in security can be combined with other vulnerabilities to attack the default admin account. This flaw undermines a previously patched CVE...

CVE-2024-21662

A flaw was found in Argo CD, where the rate limit for login attempts may be bypassed due to an incomplete fix for CVE-2020-8827. The cache-based mechanism is limited to a defaultMaxCacheSize of 1000 entries. An attacker can overflow this cache by sending excessive login attempts for different...

CVE-2024-21662

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can effectively bypass the rate limit and brute force protections by exploiting the application's weak cache-based mechanism. This loophole in security can be combine...

PT-2024-2260 · Argo Cd · Argo Cd

Name of the Vulnerable Software and Affected Versions: Argo CD versions prior to 2.8.13 Argo CD versions prior to 2.9.9 Argo CD versions prior to 2.10.4 Description: The issue is related to the mechanism of caching in Argo CD, which is a declarative, GitOps continuous delivery tool for Kubernetes...

Privilege Escalation

intel-microcode is vulnerable to privilege escalation. The vulnerability is due to a failure in the protection mechanism, which may allow an attacker to potentially enable escalation of privileges via local access...

Information Disclosure

intel-microcode is vulnerable to information disclosure. The vulnerability is due to incorrect calculation in the microcode keying mechanism, which may allow a privileged user to potentially enable information disclosure via local access...

BIT-ARTIFACTORY-2024-2247

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

CVE-2024-28255

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The JwtFilter handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request...

CVE-2023-39368

Protection mechanism failure of bus lock regulator for some IntelR Processors may allow an unauthenticated user to potentially enable denial of service via network access...

DEBIAN-CVE-2023-22655

Protection mechanism failure in some 3rd and 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

ALPINE-CVE-2023-22655

Protection mechanism failure in some 3rd and 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-22655

Protection mechanism failure in some 3rd and 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-22655

Protection mechanism failure in some 3rd and 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-39368

CVE-2023-39368 describes a protection mechanism failure in the bus lock regulator on certain Intel processors that may allow an unauthenticated attacker to cause a Denial of Service via network access. Public advisories reference mitigations via microcode updates (e.g., Intel microcode packages a...

CVE-2023-22655

The CVE-2023-22655 entry concerns a protection mechanism failure in some 3rd/4th Gen Intel Xeon CPUs when using SGX or TDX, potentially allowing a privileged local user to escalate privileges. The connected sources identify the affected hardware as Intel Xeon processors with SGX/TDX and the root ...

CVE-2023-39368

Protection mechanism failure of bus lock regulator for some IntelR Processors may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-39368

Protection mechanism failure of bus lock regulator for some IntelR Processors may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-22655

Protection mechanism failure in some 3rd and 4th Generation IntelR XeonR Processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-39368

Protection mechanism failure of bus lock regulator for some IntelR Processors may allow an unauthenticated user to potentially enable denial of service via network access...