CVE-2021-45808

jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server...

CVE-2021-45808

jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server...

Design/Logic Flaw

jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server...

CVE-2021-45808

jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server...

CVE-2021-45808

CVE-2021-45808 affects Jpress v4.2.0. Connected sources describe a file-upload vulnerability enabled by default account registration, allowing upload of arbitrary files to the server and potential remote code execution. No explicit remediation or patch details are provided in the supplied documen...

Cross site scripting

The User Registration, Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loadertext parameter found in the /includes/templates/landing-page.php file which allows attackers with administrative user access to inject arbitrary we...

CVE-2022-0232 User Registration, Login & Landing Pages – LeadMagic <= 1.2.7 Admin+ Stored Cross-Site Scripting

The User Registration, Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loadertext parameter found in the /includes/templates/landing-page.php file which allows attackers with administrative user access to inject arbitrary we...

CVE-2022-0232 User Registration, Login & Landing Pages – LeadMagic <= 1.2.7 Admin+ Stored Cross-Site Scripting

The User Registration, Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loadertext parameter found in the /includes/templates/landing-page.php file which allows attackers with administrative user access to inject arbitrary we...

CVE-2022-0232

CVE-2022-0232 affects the WordPress plugin LeadMagic (User Registration, Login & Landing Pages) up to version 1.2.7. A Stored Cross-Site Scripting vulnerability exists in loader_text (landing-page.php) that attackers with administrative privileges can exploit, especially where unfiltered_html is ...

Keycloak: Incorrect authorization allows unpriviledged users to create other users

A flaw was found in Keycloak version from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user registration is disabled...

Keycloak: Incorrect authorization allows unpriviledged users to create other users

A flaw was found in Keycloak version from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user registration is disabled...

Keycloak: Incorrect authorization allows unpriviledged users to create other users

A flaw was found in Keycloak version from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user registration is disabled...

The vulnerability of the userinfo sub-component in the Lynx text-based web browser lies in the insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerability of the userinfo sub-component in the Lynx text-based web browser is related to the disclosure of credentials via SNI. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to confidential data...

The vulnerability of the Ansible configuration management system arises from improper processing of output data for registration logs, allowing an attacker to access confidential information.

The vulnerability of the Ansible configuration management system is related to incorrect processing of output data for registration logs. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the IBM Spectrum Protect Plus data protection software lies in its insufficient protection for registration data, allowing attackers to disclose the protected information.

The vulnerability of the IBM Spectrum Protect Plus data protection software platform lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose the protected information...

The vulnerability of the NPM package manager’s library `@npmcli/arborist` allows a attacker to re-record files by manipulating symbolic links.

The vulnerability of the NPM package manager’s library @npmcli/arborist is related to errors that occur when running the npm install --ignore-scripts command. Exploiting this vulnerability could allow an attacker to re-register files by manipulating symbolic links...

CVE-2021-43974

An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to disable anonymous us...

CVE-2021-43974

An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to disable anonymous us...

CVE-2021-43974

An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to disable anonymous us...

Authentication flaw

An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to disable anonymous us...