Critical JetBrains TeamCity On-Premises Flaw Exposes Servers to Takeover - Patch Now

JetBrains is alerting customers of a critical security flaw in its TeamCity On-Premises continuous integration and continuous deployment CI/CD software that could be exploited by threat actors to take over susceptible instances. The vulnerability, tracked as CVE-2024-23917, carries a CVSS rating ...

Exploit for CVE-2024-22890

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Script...

Security update for cacti, cacti-spine (important)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2024:0031-1 Rating: important References: 1218360 1218366 1218378 1218379 1218380 1218381 Cross-References: CVE-2023-49084 CVE-2023-49085 CVE-2023-49086 CVE-2023-49088 CVE-2023-50250 CVE-2023-51448 CVSS...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2024:0020-1 Rating: important References: 1217839 1218048 1218302 1218303 1218533 1218719 Cross-References: CVE-2023-6508 CVE-2023-6509 CVE-2023-6510 CVE-2023-6511 CVE-2023-6512 CVE-2023-6702 CVE-2023-6703...

WordPress GD Rating System Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)

Software GD Rating System Type Plugin Vulnerable versions = 3.5.0 Fixed in 3.5.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 343cc2dced19 Credits WordFence Required privileg...

CVE-2024-0287 Kashipara Food Management System itemBillPdf.php sql injection

A vulnerability was found in Kashipara Food Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file itemBillPdf.php. The manipulation of the argument printid leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2023-7209 Uniway Router Device Reset device_reset.cgi denial of service

A vulnerability was found in Uniway Router up to 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boaform/devicereset.cgi of the component Device Reset Handler. The manipulation leads to denial of service. The attack may be launched remotely. T...

WordPress Rate my Post – WP Rating System Plugin <= 3.4.2 is vulnerable to Broken Access Control

Software Rate my Post – WP Rating System Type Plugin Vulnerable versions = 3.4.2 Fixed in 3.4.3 OWASP Top 10 A5: Security Misconfiguration Classification Broken Access Control CVE CVE-2023-51667 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 327f1bb4bf15 Credits Brandon...

CVE-2023-49765

Authorization Bypass Through User-Controlled Key vulnerability in Blaz K. Rate my Post – WP Rating System.This issue affects Rate my Post – WP Rating System: from n/a through 3.4.1...

CVE-2023-49765

Authorization Bypass Through User-Controlled Key vulnerability in Blaz K. Rate my Post – WP Rating System.This issue affects Rate my Post – WP Rating System: from n/a through 3.4.1...

CVE-2023-49765

CVE-2023-49765 affects the WordPress plugin Rate my Post – WP Rating System (versions

PT-2023-31335 · WordPress · Rate My Post – Wp Rating System

Name of the Vulnerable Software and Affected Versions: Rate my Post – WP Rating System versions 3.4.1 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability affects the Rate my Post – WP Rating System plugin...

CVE-2022-45809

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0...

CVE-2022-45809

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0...

Race condition

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0...

CVE-2022-45809

CVE-2022-45809 is a TOCTOU race condition vulnerability in the WordPress plugin Thumbs Rating (Ricard Torres) affecting versions up to 5.0.0. The issue arises from a race between time-of-check and time-of-use in the plugin’s handling of rating data. Public scoring places base CVSS v3.1 at 3.7 (Lo...

CVE-2022-45809 WordPress Thumbs Rating Plugin <= 5.0.0 is vulnerable to Race Condition

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0...

WordPress Plugin Thumbs Rating Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

GHSA-W7RX-824V-RGX5 WSO2 API Manager allows attackers to change the API rating

Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated...

CVE-2023-6835

Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated...