8078 matches found
SUSE-SU-2019:0563-1 Security update for audit
This update for audit fixes the following issues: Audit on SUSE Linux Enterprise 12 SP4 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...
The vulnerability of the Ansible configuration management system, related to the incorrect handling of the “no_log” option, allows a perpetrator to gain unauthorized access to sensitive information.
The vulnerability of the Ansible configuration management system is related to the improper handling of the “nolog” option, which is intended to prevent logging of tasks when they fail. This results in confidential data being recorded in event logs and on the user’s terminal. Exploiting this...
The vulnerability of the Ansible configuration management system, related to the disclosure of confidential data in vvv+ mode, allows a perpetrator to gain unauthorized access to information.
The vulnerability of the Ansible configuration management system is related to the disclosure of confidential data in the vvv+ mode with the nolog option disabled. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to information...
WordPress Content Aware Sidebars plugin <= 3.8 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress Content Aware Sidebars plugin versions = 3.8. Solution Update the WordPress Content Aware Sidebars plugin to the latest available version at least 3.8.1...
WordPress WP Affiliate Disclosure plugin <=1.1.3 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress WP Affiliate Disclosure plugin versions =1.1.3. Solution Update the WordPress WP Affiliate Disclosure plugin to the latest available version at least 1.1.4...
WordPress 404 to 301 plugin <= 3.0.1 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress 404 to 301 plugin versions = 3.0.1. Solution Update the WordPress 404 to 301 plugin to the latest available version at least 3.0.2...
WordPress BuddyForms plugin <= 2.3.1 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress BuddyForms plugin versions = 2.3.1. Solution Update the WordPress BuddyForms plugin to the latest available version at least 2.3.2...
WordPress Delete Duplicate Posts plugin <= 4.1.9.4 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue in WordPress Delete Duplicate Posts plugin versions = 4.1.9.4. Solution Update the WordPress Delete Duplicate Posts plugin to the latest available version at least 4.1.9.5...
WordPress Contact Form 7 Multi-Step Forms plugin <= 3.0.8 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress Contact Form 7 Multi-Step Forms plugin versions = 3.0.8. Solution Update the WordPress Contact Form 7 Multi-Step Forms plugin to the latest available version at least 3.0.9...
WordPress FooBox Image Lightbox plugin <= 2.6.3 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress FooBox Image Lightbox plugin versions = 2.6.3. Solution Update the WordPress FooBox Image Lightbox plugin to the latest available version at least 2.6.4...
WordPress Stop User Enumeration plugin <=1.3.19 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress Stop User Enumeration plugin versions =1.3.19. Solution Update the WordPress Stop User Enumeration plugin to the latest available version at least 1.3.20...
WordPress WP Mobile Menu plugin <=2.7.2 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress WP Mobile Menu plugin versions =2.7.2. Solution Update the WordPress WP Mobile Menu plugin to the latest available version at least 2.7.3...
WordPress FooGallery plugin <= 1.6.15 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress FooGallery plugin versions = 1.6.15. Solution Update the WordPress FooGallery plugin to the latest available version at least 1.6.17...
WordPress NextGEN Gallery plugin <= 3.1.6 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress NextGEN Gallery plugin versions = 3.1.6. Solution Update the WordPress NextGEN Gallery plugin to the latest available version at least 3.1.7...
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Description The library, used in numerous plugins, does not have proper authorisation when updating blog options, allowing any authenticated users, such as subscriber to update arbitrary options As any authenticated user: Enable new user registrations:...
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Description The library, used in numerous plugins, does not have proper authorisation when updating blog options, allowing any authenticated users, such as subscriber to update arbitrary options PoC As any authenticated user: Enable new user registrations:...
The vulnerability of the 1Policy procedure (the “forceput” version of the procedure) for software that processes, transforms, and generates Ghostscript documents involves a possibility to bypass the environment for secure execution. This allows a perpetrator to execute arbitrary code.
The vulnerability of the 1Policy procedure the “forceput” version of the procedure in the software for processing, transforming, and generating Ghostscript documents is related to the possibility of circumventing the environment for secure execution, even when the -dSAFER option is used. Exploiti...
Joomla! Component J2Store < 3.3.7 - SQL Injection
Exploit Title: J2Store Plugin for Joomla! 3.3.6 - SQL Injection Date: 19/02/2019 Author: Andrei Conache Twitter: @andreiconache Contact: andrei.conacheatprotonmail.com Software Link: https://www.j2store.org Version: 3.x-3.3.6 Tested on: Linux CVE: CVE-2019-9184 1. Description: J2Store is the most...
