Fortinet FortiManager 信息泄露漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet, Inc. Fortinet FortiAnalyzer is a centralized network security reporting solution. Fortinet FortiManager and FortiAnalyzer have an information disclosure vulnerability that can be exploited by attackers to...

WordPress WP Setup Wizard Plugin <= 1.0.8.1 is vulnerable to Sensitive Data Exposure

Software WP Setup Wizard Type Plugin Vulnerable versions = 1.0.8.1 Fixed in 1.0.8.2 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-25917 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 5a05aed5e6cb Credits Dave Jong Patchstack...

WordPress Community by PeepSo Plugin <= 6.2.7.0 is vulnerable to Sensitive Data Exposure

Software Community by PeepSo Type Plugin Vulnerable versions = 6.2.7.0 Fixed in 6.2.7.1 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-25923 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 13d9a4c9470c Credits...

WordPress Sunshine Photo Cart Plugin <= 3.0.24 is vulnerable to Sensitive Data Exposure

Software Sunshine Photo Cart Type Plugin Vulnerable versions = 3.0.24 Fixed in 3.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1294 Patch priority Low CVSS severity Low 5.3 Developer WP Sunshine PSID b62f43ca815f Credits Francesco Carlucci Required...

WordPress MapPress Maps for WordPress Plugin < 2.88.16 is vulnerable to Sensitive Data Exposure

Software MapPress Maps for WordPress Type Plugin Vulnerable versions 2.88.16 Fixed in 2.88.16 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-0421 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 800421954891 Credits Erwan LR...

WordPress InfiniteWP Client Plugin <= 1.12.3 is vulnerable to Sensitive Data Exposure

Software InfiniteWP Client Type Plugin Vulnerable versions = 1.12.3 Fixed in 1.12.3.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-6565 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 133bb5df9f72 Credits Christian Angel...

WordPress WP Editor Plugin <= 1.2.7 is vulnerable to Sensitive Data Exposure

Software WP Editor Type Plugin Vulnerable versions = 1.2.7 Fixed in 1.2.8 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-25591 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 005894aaae3d Credits Joshua Chan...

WordPress Paid Memberships Pro Plugin <= 2.12.8 is vulnerable to Sensitive Data Exposure

Software Paid Memberships Pro Type Plugin Vulnerable versions = 2.12.8 Fixed in 2.12.9 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 077d0e5b70f8 Credits Scott Kingsley Clark Required...

WordPress Easy Forms for Mailchimp Plugin <= 6.9.0 is vulnerable to Sensitive Data Exposure

Software Easy Forms for Mailchimp Type Plugin Vulnerable versions = 6.9.0 Fixed in N/A OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-25095 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 268130a7347a Credits...

WordPress Frontend File Manager Plugin <= 22.7 is vulnerable to Sensitive Data Exposure

Software Frontend File Manager Type Plugin Vulnerable versions = 22.7 Fixed in 22.8 OWASP Top 10 A4: Insecure Design Classification Sensitive Data Exposure CVE CVE-2024-25903 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID cda7ef951c90 Credits Joshua Chan Required privileg...

CVE-2023-50291

A flaw was found in Apache Solr. The /admin/info/properties endpoint, which publishes the Solr process' Java system properties, is only setup to hide system properties that have "password" contained in the name. There are a number of sensitive system properties, such as "basicauth" and...

UBUNTU-CVE-2023-50298

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. Solr Streaming Expressions allows users to extract data from other Solr Clouds, using a "zkHost" parameter. When original...

PT-2024-1745 · Fortinet · Fortimanager +2

Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions 7.4.0 through 7.4.1 and before 7.2.5 Fortinet FortiAnalyzer versions 7.4.0 through 7.4.1 and before 7.2.5 Fortinet FortiAnalyzer-BigData before 7.2.5 Description: The issue is related to the exposure of sensitiv...

WordPress Simple Page Access Restriction Plugin <= 1.0.21 is vulnerable to Sensitive Data Exposure

Software Simple Page Access Restriction Type Plugin Vulnerable versions = 1.0.21 Fixed in 1.0.23 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-0965 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 09ce34b22c58 Credits Francesco...

PT-2024-14986

Name of the Vulnerable Software and Affected Versions MİA-MED versions prior to 1.0.7 Description The issue is related to the exposure of sensitive information due to incompatible policies, allowing the collection of data as provided by users. Recommendations For versions prior to 1.0.7, update t...

PT-2024-14987

Name of the Vulnerable Software and Affected Versions MİA-MED versions prior to 1.0.7 Description The issue affects Mia Technology Inc.'s MİA-MED, allowing sensitive strings to be read within an executable due to plaintext storage of a password. Recommendations For versions prior to 1.0.7, update...

Design/Logic Flaw

An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that indexing the document failed and that response would contain parts of the original document. Depending on the nature of the document that the APM Server attempted to ingest, this cou...

Design/Logic Flaw

Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Feb-2024 Release 1, which stems from a security issue in Smart Suggestions that could allow an...

CVE-2023-6557

The The Events Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.2.8.2 via the route function hooked into wpajaxnoprivtribedropdown. This makes it possible for unauthenticated attackers to extract potentially sensitive data...