CVE-2023-39305 WordPress Yet Another Stars Rating plugin <= 3.4.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through = 3.4.3...

CBL Mariner 2.0 Security Update: mariadb (CVE-2023-6937)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6937 advisory. - wolfSSL prior to 5.6.6 did not check that messages in one DTLS record do not span key boundaries. As a resul...

govulncheck-vulndb-0.0.20241209T183251-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241209T183251-1.1 on GA media Announcement ID: openSUSE-SU-2024:14567-1 Rating: moderate Cross-References: CVE-2024-10220 CVE-2024-36620 CVE-2024-36621 CVE-2024-36623 CVE-2024-37820 CVE-2024-43784 CVE-2024-45719 CVE-2024-50948 CVE-2024-52003 CVE-2024-52529 CVE-2024-52801...

Bykea: Lack of Feedback Validation Permits Arbitrary Driver Ratings

The vulnerability discovered by @bugbountywithmarco in Bykea's feedback system allowed authenticated passengers to submit feedback for drivers they had not actually ridden with. The exploit was limited to trips the attacker legitimately owned, and each trip could only affect one driver rating at ...

squid-6.12-1.1 on GA media (moderate)

squid-6.12-1.1 on GA media Announcement ID: openSUSE-SU-2024:14566-1 Rating: moderate Cross-References: CVE-2024-45802 CVSS scores: CVE-2024-45802 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2024-45802 SUSE : 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H...

WordPress plugin Reviews and Rating 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-12016 · Google · Google My Business

Name of the Vulnerable Software and Affected Versions: Reviews and Rating – Google My Business versions n/a through 4.14 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This problem can be...

pam-1.7.0-2.1 on GA media (moderate)

pam-1.7.0-2.1 on GA media Announcement ID: openSUSE-SU-2024:14563-1 Rating: moderate Cross-References: CVE-2024-10963 CVSS scores: CVE-2024-10963 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVE-2024-10963 SUSE : 8.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 15 for SLE 15 SP5) (SUSE-SU-2024:4228-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

skopeo-1.16.1-2.1 on GA media (moderate)

skopeo-1.16.1-2.1 on GA media Announcement ID: openSUSE-SU-2024:14562-1 Rating: moderate Cross-References: CVE-2024-9676 CVSS scores: CVE-2024-9676 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2024-9676 SUSE : 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

libmozjs-128-0-128.5.1-1.1 on GA media (moderate)

libmozjs-128-0-128.5.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14542-1 Rating: moderate Cross-References: CVE-2024-11691 CVE-2024-11692 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696 CVE-2024-11697 Affected Products: openSUSE Tumbleweed An update that solves 6 vulnerabilities can now be...

ansible-10-10.6.0-1.1 on GA media (moderate)

ansible-10-10.6.0-1.1 on GA media Announcement ID: openSUSE-SU-2024:14536-1 Rating: moderate Cross-References: CVE-2014-4966 CVE-2014-4967 CVE-2015-3908 CVE-2016-3096 CVE-2016-9587 CVE-2017-7466 CVE-2017-7481 CVE-2017-7550 CVE-2018-10855 CVE-2018-10875 CVE-2018-16837 CVE-2018-16859 CVE-2018-16876...

gimp-2.10.38-4.1 on GA media (moderate)

gimp-2.10.38-4.1 on GA media Announcement ID: openSUSE-SU-2024:14534-1 Rating: moderate Cross-References: CVE-2022-32990 CVE-2023-44443 CVSS scores: CVE-2022-32990 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-44443 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affect...

python310-tornado6-6.4.2-1.1 on GA media (moderate)

python310-tornado6-6.4.2-1.1 on GA media Announcement ID: openSUSE-SU-2024:14528-1 Rating: moderate Cross-References: CVE-2024-52804 CVSS scores: CVE-2024-52804 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2024-52804 SUSE : 6.9...

tomcat10-10.1.33-1.1 on GA media (moderate)

tomcat10-10.1.33-1.1 on GA media Announcement ID: openSUSE-SU-2024:14526-1 Rating: moderate Cross-References: CVE-2024-52316 CVSS scores: CVE-2024-52316 SUSE : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2024-52316 SUSE : 10 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H...

php8-8.3.14-1.1 on GA media (moderate)

php8-8.3.14-1.1 on GA media Announcement ID: openSUSE-SU-2024:14521-1 Rating: moderate Cross-References: CVE-2024-11233 CVE-2024-11234 CVE-2024-11236 CVE-2024-8929 CVE-2024-8932 CVSS scores: CVE-2024-11233 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H CVE-2024-11233 SUSE : 8.3...

opentofu-1.8.6-1.1 on GA media (moderate)

opentofu-1.8.6-1.1 on GA media Announcement ID: openSUSE-SU-2024:14520-1 Rating: moderate Cross-References: CVE-2024-34156 CVSS scores: CVE-2024-34156 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

traefik-3.2.1-1.1 on GA media (moderate)

traefik-3.2.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14522-1 Rating: moderate Cross-References: CVE-2024-51744 CVSS scores: CVE-2024-51744 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2024-51744 SUSE : 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

traefik2-2.11.14-1.1 on GA media (moderate)

traefik2-2.11.14-1.1 on GA media Announcement ID: openSUSE-SU-2024:14517-1 Rating: moderate Cross-References: CVE-2024-51744 CVSS scores: CVE-2024-51744 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2024-51744 SUSE : 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:...

WordPress Tutor LMS plugin <= 2.7.6 - Unauthenticated SQL Injection via rating_filter vulnerability

Unauthenticated SQL Injection via ratingfilter vulnerability discovered by mikemyers in WordPress Plugin Tutor LMS versions = 2.7.6...