2127 matches found
CVE-2023-43298
An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
PT-2023-26976 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 11.3 through 16.4.2 GitLab versions 16.5 through 16.5.2 GitLab versions 16.6 through 16.6.0 Description: An issue has been discovered in GitLab where unauthorized users could view public projects' release descriptions via an...
VulnCheck KEV: CVE-2021-21389
BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in...
WordPress WordPress Team Members – GS Plugins Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)
Software WordPress Team Members – GS Plugins Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 74a732ebddc0 Credits Unknown Requir...
CVE-2023-32957
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dazzlersoft Team Members Showcase plugin = 1.3.4 versions...
CVE-2023-32957
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dazzlersoft Team Members Showcase plugin = 1.3.4 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dazzlersoft Team Members Showcase plugin = 1.3.4 versions...
CVE-2023-32957
CVE-2023-32957 concerns the WordPress plugin Team Members Showcase by Dazzlersoft, affected in versions <= 1.3.4. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) flaw, exploitable by an administrator or higher privileges via admin settings. Multiple sources corroborate ...
WordPress Plugin Team Members Showcase Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2023-5542
Students in "Only see own membership" groups could see other students in the group, which should be hidden...
UBUNTU-CVE-2023-5542
Students in "Only see own membership" groups could see other students in the group, which should be hidden...
CVE-2023-47366
The leakage of channel access token in craftmembers Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47363
The leakage of channel access token in F.B.P members Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47363
CVE-2023-47363 affects Line app, specifically F.B.P members version 13.6.1. The issue is leakage of the channel access token, enabling remote attackers to send malicious notifications to victims. The Red Hat/CNNVD entries corroborate token leakage and mention Line 13.6.1. No exploitation details ...
PT-2023-32165 · Moodle · Moodle
Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue allows students in "Only see own membership" groups to see other students in the group, which should be hidden. Recommendations: At the moment, there is no information about a newe...
PT-2023-30428 · Unknown · Craft Members
Name of the Vulnerable Software and Affected Versions: craft members version 13.6.1 Description: The issue allows remote attackers to send malicious notifications to victims due to the leakage of channel access token. Recommendations: For version 13.6.1, consider restricting access to the craft...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version 13.6.1, which stems from an access token disclosure issue in craftmembers. A remote attacker can exploit the vulnerability to send a malicious notification to the victim...
WordPress Team Members Showcase Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)
Software Team Members Showcase Type Plugin Vulnerable versions = 1.3.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32957 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8f4be40a02eb Credits Emili Castells...
UBUNTU-CVE-2023-4822
Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor...
Mattermost Security Vulnerabilities
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from an inability to check the Show Full Name option on the /api/v4/teams/TEAMID/top/TEAMmembers endpoint...