CVE-2015-9476: Incorrect Default Permissions

The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates...

PT-2019-7435

Name of the Vulnerable Software and Affected Versions Teardrop theme version 1.8.1 for WordPress Description The issue is related to insufficient restrictions on option updates in the Teardrop theme for WordPress. Recommendations For Teardrop theme version 1.8.1, update to a newer version that...

PT-2019-7436

Name of the Vulnerable Software and Affected Versions Vernissage theme version 1.2.8 Description The issue is related to insufficient restrictions on option updates in the Vernissage theme for WordPress. Recommendations For version 1.2.8, consider updating to a newer version that addresses the...

PRODSECBUG-2425: Cross-Site Scripting via Signifyd Guarantee Option Translation Override

More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...

High severity vulnerability that affects PeterO.Cbor

Impact The CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denial of service can happen if those reference...

GHSA-CXW4-9QV9-VX5H High severity vulnerability that affects PeterO.Cbor

Impact The CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denial of service can happen if those reference...

PT-2019-5677

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the dccp print option function of the DCCP parser in tcpdump, which can be exploited by a remote attacker to cause a denial of service. The dccp print...

UBUNTU-CVE-2019-16411

An issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid IPv4Options, the function IPV4OptValidateTimestamp in decode-ipv4.c tries to access a memory region that is not allocated. There is a check for o-len data + 3" places one beyond the 3 bytes, because the...

PT-2019-7804

Name of the Vulnerable Software and Affected Versions wp-invoice plugin versions prior to 4.1.1 Description The issue allows for privilege escalation due to the wpi update user option. Recommendations For versions prior to 4.1.1, update to version 4.1.1 or later to resolve the issue...

PT-2019-7755 · WordPress · Icegram

Name of the Vulnerable Software and Affected Versions: icegram plugin versions prior to 1.9.19 Description: The issue concerns a CSRF vulnerability via the option name parameter in the "wp-admin/edit.php" endpoint. This allows for potential unauthorized actions. Recommendations: For versions prio...

GHSA-2P82-V77V-MPPR Airbrake keys not being filtered

The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklistkeys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 also, 4.2.2 and earlier are unaffected...

CURL-CVE-2019-5482 TFTP small blocksize heap buffer overflow

libcurl contains a heap buffer overflow in the function tftpreceivepacket that receives data from a TFTP server. It can call recvfrom with the default size for the buffer rather than with the size that was used to allocate it. Thus, the content that might overwrite the heap memory is controlled b...

TFTP small blocksize heap buffer overflow

libcurl contains a heap buffer overflow in the function tftpreceivepacket that receives data from a TFTP server. It can call recvfrom with the default size for the buffer rather than with the size that was used to allocate it. Thus, the content that might overwrite the heap memory is controlled b...

The vulnerability of the tcp_sack_option() function in the kernel of the OpenBSD operating system allows a hacker to cause a service failure.

The vulnerability of the tcpsackoption function in the kernel of the OpenBSD operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2019-15816

The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via savesettingspage and other save functions...

CVE-2019-15816

The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via savesettingspage and other save functions...

Design/Logic Flaw

The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via savesettingspage and other save functions...

CVE-2019-15816

The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via savesettingspage and other save functions...

CVE-2019-15816

The CVE-2019-15816 entry concerns the WordPress plugin wp-private-content-plus. Connected sources confirm that versions before 2.0 allow option changes via save_settings_page and other save_ functions without proper protection, enabling unauthenticated modification of plugin options. The vulnerab...

PT-2019-14405

Name of the Vulnerable Software and Affected Versions wp-private-content-plus plugin versions prior to 2.0 Description The issue concerns the lack of protection against option changes via the save settings page and other save functions in the wp-private-content-plus plugin for WordPress...