11427 matches found
PT-2024-13508 · Searchiq · Searchiq
Name of the Vulnerable Software and Affected Versions: SearchIQ versions prior to 4.4 Description: The issue is related to a Missing Authorization vulnerability in SearchIQ, which allows exploitation due to incorrectly configured access control security levels. Recommendations: For versions prior...
WordPress plugin Simple 301 Redirects by BetterLinks has security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Digi ConnectPort security vulnerabilities
Digi ConnectPort is a server from Digital Networks Malaysia Digi Inc. It provides wireless communication. A security vulnerability exists in Digi ConnectPort versions prior to 1.4.12, which originated from a vulnerability that allows an attacker on a local area network LAN to achieve unauthorized...
WordPress plugin Acme Fix Images has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress plugin Essential Blocks for Gutenberg has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
WordPress plugin Total Poll Lite has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress plugin Smart Forms has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
WordPress plugin Void Elementor Post Grid Addon for Elementor Page builder has a security vulnerability
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-36096 · Unknown · Aio Contact
Name of the Vulnerable Software and Affected Versions: AIO Contact versions prior to 2.8.1 Description: The issue is related to a Missing Authorization vulnerability. Recommendations: For versions prior to 2.8.1, update to a version that contains a fix for this issue. At the moment, there is no...
WordPress plugin SALERT security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
QNAP Systems License Center security vulnerabilities
QNAP Systems License Center is a tool for monitoring and managing the licenses of applications running on local devices from China's Weilian Technology QNAP Systems. A security vulnerability exists in QNAP Systems License Center version 1.9.43 and prior versions that stems from the inclusion of a...
QNAP Systems QuRouter security vulnerabilities
QNAP Systems QuRouter is a router management system from China Weilian Technology QNAP Systems. A security vulnerability exists in QNAP Systems QuRouter version 2.4.5.032 and prior versions, which stems from the inclusion of a SQL injection vulnerability...
WordPress plugin WDesignkit code-related vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...
rPGP security vulnerability
rPGP is a pure Rust implementation of OpenPGP open sourced by rPGP. A security vulnerability exists in rPGP versions prior to 0.14.1. An attacker exploiting this vulnerability could trigger an rpgp crash by supplying specially crafted data...
PT-2024-10115
Name of the Vulnerable Software and Affected Versions Erlang OTP versions 25.3.2.8 through 27.0 Erlang OTP version 26.2 Erlang OTP versions prior to 27.1.3 Description A regression in the ssl application of Erlang OTP causes a server or client to verify the peer even when incorrect extended key...
rPGP security vulnerability
rPGP is a pure Rust implementation of OpenPGP open sourced by rPGP. A security vulnerability exists in rPGP versions prior to 0.14.1. An attacker exploiting this vulnerability could cause resource exhaustion by providing specially crafted messages...
sigstore-java input validation error vulnerability
sigstore-java is a sigstore open source sigstore java client for interacting with the sigstore infrastructure. An input validation error vulnerability exists in versions of sigstore-java prior to 1.2.0, which stems from an inability to adequately validate a user if they provide an invalid signatu...
Documento security vulnerabilities
Documenso is an open source DocuSign alternative to Documenso Open Source. A security vulnerability exists in versions of Documenso prior to 1.8.0 that stems from the user interface misrepresenting critical information, allowing content spoofing...
PT-2024-36919
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue arises from the migrate to node function assuming there is at least one VMA in a MM, which is not always true. This can lead to find vma returning NULL, and subsequently, a null point...
