2890 matches found
pki-core:10.6 bug fix and enhancement update
An update is available for ldapjdk, tomcatjss, module.tomcatjss, module.jss, module.ldapjdk, jss. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed...
Microsoft Patch Tuesday for May 2023 — Fewest vulnerabilities disclosed in a month in three-plus years
Microsoft disclosed 40 vulnerabilities across its suite of products and software Tuesday, the fewest the companys included in a Patch Tuesday since December 2019. However, two of the vulnerabilities is being actively exploited in the wild, according to Microsoft, the fourth month in a row in whic...
Answer Missing Authorization vulnerability
A missing authorization in GitHub repository answerdev/answer prior to 1.0.9 can lead to a user rating their own answer as the best answer...
PT-2023-20354 · Answerdev · Answer
Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.9 Description: The issue is related to missing authorization in the GitHub repository answerdev/answer. This can lead to a user rating their own answer as the best answer. Recommendations: For versions...
WordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)
Software Multi Rating Type Plugin Vulnerable versions = 5.0.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32130 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e47a95b5141e Credits yuyudhn Required privilege...
WordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Other Vulnerability Type
Software Multi Rating Type Plugin Vulnerable versions = 5.0.6 Fixed in N/A OWASP Top 10 A1: Injection Classification Other Vulnerability Type CVE CVE-2023-32127 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 84e75518f454 Credits yuyudhn Required privilege Unauthenticated...
WordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software Multi Rating Type Plugin Vulnerable versions = 5.0.6 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32125 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 619f441acc2a Credits yuyudhn Required privile...
WordPress Thumbs Rating Plugin <= 5.0.0 is vulnerable to Race Condition
Software Thumbs Rating Type Plugin Vulnerable versions = 5.0.0 Fixed in N/A OWASP Top 10 A6: Security Misconfiguration Classification Race Condition CVE CVE-2022-45809 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID e09b57cb00e4 Credits thiennv Required privilege...
WordPress Rating Widget Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)
Software Rating Widget Type Plugin Vulnerable versions = 3.2.0 Fixed in 3.2.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23831 Patch priority Low CVSS severity Low 6.5 Developer Rating-Widget PSID c69402dd8b41 Credits István Márton Required...
CVE-2023-2214
A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/sales/managesale.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has...
Improper Error Handling at Rating function
Description Please enter a description of the vulnerability. Navigating rating function http://127.0.0.1:8083/ratings/stored/-1 Change this number to arbitrary characters http://192.168.14.180:8083/ratings/stored/-2 Error occurs allows user to know the path of application file within system...
go-toolset bug fix and enhancement update
An update is available for golang, go-toolset. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming language tools and librarie...
openssl-ibmca bug fix and enhancement update
An update is available for openssl-ibmca. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The openssl-ibmca package provides a dynamic OpenSSL engine for the IBM...
iptables bug fix and enhancement update
An update is available for iptables. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The iptables utility controls the network packet filtering code in the Linux...
selinux-policy bug fix and enhancement update
An update is available for selinux-policy. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The selinux-policy packages contain the rules that govern how confined...
sos bug fix and enhancement update
An update is available for sos. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sos package contains a set of utilities that gather information from system...
Sql injection
A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The explo...
CVE-2022-47433
Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin = 5.0.5 versions...
