CVE-2022-40310

CVE-2022-40310 affects the WordPress plugin Rate my Post – WP Rating System (versions

CVE-2022-40671

CVE-2022-40671 : In WordPress, the Rate my Post – WP Rating System plugin (versions ≤ 3.3.4) contains a CSRF vulnerability due to insufficient request validation in certain actions, allowing an attacker to trick authenticated users into performing unintended actions. The affected component is the...

WordPress plugin Rate my Post – WP Rating System 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site request forgery...

PT-2022-25469 · WordPress · Rate My Post – Wp Rating System

Name of the Vulnerable Software and Affected Versions: Rate my Post – WP Rating System plugin versions = 3.3.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on ...

GHSA-GWP4-MCV4-W95J jwcrypto token substitution can lead to authentication bypass

The JWT code can auto-detect the type of token being provided, and this can lead the application to incorrect conclusions about the trustworthiness of the token. Quoting the private disclosure we received : "Under certain circumstances, it is possible to substitute a .. signed JWS with a JWE that...

libdnf bug fix and enhancement update

An update is available for libdnf. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A library providing simplified C and Python API to the libsolv package...

WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability

Race Condition vulnerability leading to votes increase/decrease discovered by Nguy Minh Tuan Patchstack Alliance in WordPress Rate my Post – WP Rating System plugin versions = 3.3.4. Solution Update the WordPress Rate my Post – WP Rating System plugin to the latest available version at least 3.3....

resource-agents bug fix and enhancement update

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The resource-agents packages provide the Pacemaker and RGManager...

kronosnet bug fix update

An update is available for kronosnet. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kronosnet knet is a network abstraction layer designed for High Availabilit...

CVE-2022-36422

Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin = 1.89 at WordPress...

CVE-2022-36422

CVE-2022-36422 pertains to a race condition in the WordPress WP-PostRatings plugin, affecting versions

PT-2022-23360 · Lester 'Gamerz' Chan · Wp-Postratings

Name of the Vulnerable Software and Affected Versions: Lester 'GaMerZ' Chan WP-PostRatings plugin version 1.89 and earlier Description: The issue is related to a race condition that allows rating increase or decrease in the WP-PostRatings plugin. Recommendations: For Lester 'GaMerZ' Chan...

Design/Logic Flaw

This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could steal an administrator's cookie. The issue is fixed in version 5.0.2...

CVE-2022-35933

PrestaShop Product Comments module (for PrestaShop) is affected by a cross-site scripting vulnerability prior to 5.0.2 that can allow an attacker to steal an administrator’s cookie. The root cause is insufficient filtering/escaping of user-supplied data, enabling cookie theft via crafted input. R...

Adware found on Google Play — PDF Reader serving up full screen ads

A PDF reader found on Google Play with over one million downloads is aggressively displaying full screen ads, even when the app is not in use. More specifically, the reader is known as PDF reader - documents viewer, package name com.document.pdf.viewer. As a result, this aggressive behavior lands...

vulkan bug fix and enhancement update

An update is available for shaderc, glslang, spirv-tools, vulkan-loader, vulkan-headers, vulkan-validation-layers, vulkan-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

slirp4netns bug fix and enhancement update

An update is available for slirp4netns. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The slirp4netns package provides slirp for network namespaces. Bug Fixes...

fuse-overlayfs bug fix and enhancement update

An update is available for fuse-overlayfs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fuse-overlayfs package provides an overlayfs FUSE implementation,...

mariadb:10.5 security, bug fix, and enhancement update

An update is available for Judy, mariadb, galera. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MariaDB is a multi-user, multi-threaded SQL database server tha...

Ambit Technologies Itech Movie Portal Script SQL注入漏洞

Ambit Technologies Itech Movie Portal Script is a movie portal script from Ambit Technologies, Inc. Ambit Technologies Itech Movie Portal Script 7.36 suffers from a SQL injection vulnerability that stems from some unknown handling of film-rating.php, where manipulation of the parameter v can lead...