20420 matches found
WordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by luc Patchstack in WordPress Plugin Chaty Pro versions = 3.3.3...
CVE-2024-12213
The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable...
Hp LaserJet Pro Printer、HP LaserJet Enterprise和HP LaserJet Managed 安全漏洞
HP LaserJet Enterprise and others are products of Hewlett-Packard HP, U.S.A. HP LaserJet Enterprise is a multifunction printer.HP LaserJet Managed is a multifunction printer.Hp LaserJet Pro Printer is a laser printer. A security vulnerability exists in Hp LaserJet Pro Printer, HP LaserJet...
Hp LaserJet Pro Printer、HP LaserJet Enterprise和HP LaserJet Managed 安全漏洞
HP LaserJet Enterprise and others are products of Hewlett-Packard HP, U.S.A. HP LaserJet Enterprise is a multifunction printer.HP LaserJet Managed is a multifunction printer.Hp LaserJet Pro Printer is a laser printer. A security vulnerability exists in Hp LaserJet Pro Printer, HP LaserJet...
CVE-2024-12213
The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable...
CVE-2024-12213
CVE-2024-12213 affects the WordPress plugin WP Job Board Pro, where an attacker can specify the role during user registration, enabling unauthenticated privilege escalation to administrator on vulnerable sites. Technical details in connected docs indicate the issue arises from processing the regi...
CVE-2024-12213 WP Job Board Pro < 1.2.85 - Unauthenticated Privilege Escalation via process_register
The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable...
CVE-2024-12213 WP Job Board Pro < 1.2.85 - Unauthenticated Privilege Escalation via process_register
The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable...
WordPress plugin WP Job Board Pro 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress WP Job Board Pro plugin <= 1.2.76 - Unauthenticated Privilege Escalation via process_register vulnerability
Unauthenticated Privilege Escalation via processregister vulnerability discovered by Foxyyy in WordPress Plugin WP Job Board Pro versions = 1.2.76...
SUSE CVE-2025-21685
In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race The yt21380fcserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointe...
Microsoft Surface 输入验证错误漏洞
Microsoft Surface is a tablet computer from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Surface. An attacker exploiting this vulnerability could bypass certain features. The following products and versions are affected:Surface Laptop 4 with Intel...
PT-2025-20235 · Ао'Сбк' · Communigate Pro
Уязвимость почтового сервера CommuniGate Pro связана с недостаточной проверкой поступающих запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, осуществить SSRF-атаку...
The vulnerability of the CommuniGate Pro mail server, related to buffer overflows in the stack, allows a hacker to execute arbitrary code.
The vulnerability of the CommuniGate Pro mail server is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
About the security content of visionOS 2.3.1
About the security content of visionOS 2.3.1 This document describes the security content of visionOS 2.3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
Apple Security Update: visionOS 2.3.1
Apple recommends to install security update visionOS 2.3.1 on devices Apple Vision Pro...
CVE-2024-7419
The WP ALL Export Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.1 via the custom export fields. This is due to the missing input validation and sanitization of user-supplied data. This makes it possible for unauthenticated attackers to...
CVE-2024-9664
The WP All Import Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.9.7 via deserialization of untrusted input from an import file. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP...
CVE-2025-21685
In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race The yt21380fcserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointe...
CVE-2025-21685
CVE-2025-21685 : In Linux kernel, a race in platform/x86 lenovo-yoga-tab2-pro-1380-fastcharger was fixed. The yt2_1380_fc_serdev_probe() path called devm_serdev_device_open() before initializing serdev client ops, risking a NULL pointer dereference in the serdev controller’s receive_buf handler w...