5838 matches found
CVE-2023-51425
CVE-2023-51425 affects the Rencontre – Dating Site WordPress plugin (
CVE-2023-51405
CVE-2023-51405 concerns the WordPress plugin BookingPress prior to version 1.0.75, where unauthenticated users could manipulate the booking price due to an improper validation in the bookingpress_confirm_booking flow. Affected versions are BookingPress up to 1.0.74; the vulnerability enables pric...
CVE-2023-48763
CVE-2023-48763 – JetFormBuilder Content Injection : An unauthenticated attacker can inject content via improper neutralization of script-related HTML tags in JetFormBuilder. Affected: WordPress JetFormBuilder versions up to 3.1.4. Root cause: content injection vulnerability (XSS-like) in dynamic ...
CVE-2023-47504
CVE-2023-47504 affects Elementor Website Builder (
CVE-2023-25790
CVE-2023-25790 affects xtemos WoodMart (WordPress theme) and is described as an unauthenticated Cross-Site Scripting/shortcode injection vulnerability in WoodMart up to versions 7.0.4 (and 7.0.4 and earlier in some entries). The issue is caused by improper authentication and input handling that a...
CVE-2022-45852
CVE-2022-45852 is a path traversal vulnerability in the WordPress WP-FormAssembly plugin affecting versions n/a through 2.0.5. It arises from improper limitation of a pathname to a restricted directory, allowing traversal to sensitive files. Documented impacts include (per sources) potential unau...
CVE-2024-3470
An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to use a deploy key pertaining to an organization to bypass an organization ruleset. An attacker would require access to a valid deploy key for a repository in the organization as we...
CVE-2024-3470
An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to use a deploy key pertaining to an organization to bypass an organization ruleset. An attacker would require access to a valid deploy key for a repository in the organization as we...
CVE-2024-3470
GitHub Enterprise Server suffers an Improper Privilege Management flaw that lets a repository deploy key bypass an organization’s ruleset when an attacker has a valid deploy key and repository administrator access. Affected versions are 3.11–3.12; remediation is to upgrade to 3.11.8 or 3.12.2. In...
CVE-2024-3470 Repository administrator can bypass organization's ruleset using deploy keys
An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to use a deploy key pertaining to an organization to bypass an organization ruleset. An attacker would require access to a valid deploy key for a repository in the organization as we...
PT-2024-26117 · Github · Github Enterprise Server
Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions 3.11 through 3.12 Description: An Improper Privilege Management issue was identified in GitHub Enterprise Server, allowing an attacker to bypass an organization ruleset using a deploy key. The attacker would...
GitHub Enterprise Server 安全漏洞
GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server versions...
CVE-2023-50885
CVE-2023-50885 affects Store Locator WordPress (AGILESTORE LOCATOR) plugin for WordPress, with versions up to 1.4.14. It is an improper limitation of a pathname to a restricted directory (path traversal) vulnerability that can enable arbitrary file deletion. Red Hat and other sources corroborate ...
CVE-2023-47843
CVE-2023-47843 : WordPress Plugin CataBlog
CVE-2023-4235
CVE-2023-4235 — ofono SMS decoding stack overflow Affected software: ofono (Open Source Telephony stack on Linux). Vulnerability: A stack-based buffer overflow occurs in the decode_deliver_report() path used for SMS decoding. The issue stems from a missing bound check for the memcpy length in dec...
CVE-2023-4234
CVE-2023-4234 affects ofono (Open Source Telephony on Linux). The vulnerability is a stack-based buffer overflow triggered in decode_submit_report() during SMS decoding, with a bound check missing for the memcpy length in that function. Attack surface is plausible from a compromised modem, malici...
CVE-2023-51418
CVE-2023-51418 affects the JVM Gutenberg Rich Text Icons WordPress plugin. Public docs show a Missing Authorization vulnerability that enables authenticated users to perform unauthorized actions, including directory traversal leading to Arbitrary File Deletion or similar file operations, impactin...
CVE-2024-1350
CVE-2024-1350 concerns the WordPress plugin Honeypot for WP Comment (versions
CVE-2023-44227
CVE-2023-44227 affects WordPress plugin Simple File List (Mitchell Bennis) up to version 6.1.9. Root cause: Missing/insufficient authorization controls allow unauthenticated users to delete arbitrary files via the plugin’s deletion functionality, enabling potential denial of service or data loss....