4759 matches found
CVE-2024-36226 Adobe Experience Manager | Improper Input Validation (CWE-20)
Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitatio...
WordPress Sassy social share plugin < 3.3.63 - Admin+ Stored Cross-Site scripting vulnerability
Admin+ Stored Cross-Site scripting vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Sassy Social Share versions 3.3.63...
CVE-2024-4924 Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting
The Social Sharing Plugin WordPress plugin before 3.3.63 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress Sassy Social Share Plugin < 3.3.63 is vulnerable to Cross Site Scripting (XSS)
Software Sassy Social Share Type Plugin Vulnerable versions 3.3.63 Fixed in 3.3.63 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4924 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8218db38fbf6 Credits Dmitrii Ignatyev...
CVE-2024-31307
Missing Authorization vulnerability in appscreo Easy Social Share Buttons.This issue affects Easy Social Share Buttons: from n/a through 9.4...
CVE-2024-31307 WordPress Easy Social Share Buttons plugin <= 9.4 - Multiple Broken Access Control vulnerability
Missing Authorization vulnerability in appscreo Easy Social Share Buttons.This issue affects Easy Social Share Buttons: from n/a through 9.4...
CVE-2024-31307 WordPress Easy Social Share Buttons plugin <= 9.4 - Multiple Broken Access Control vulnerability
Missing Authorization vulnerability in appscreo Easy Social Share Buttons.This issue affects Easy Social Share Buttons: from n/a through 9.4...
CVE-2024-31307
CVE-2024-31307 maps to a Missing Authorization/Broken Access Control issue in the WordPress plugin Easy Social Share Buttons (versions <= 9.4). The connected enrichment entry explicitly frames it as a “WordPress Easy Social Share Buttons plugin
CVE-2024-32820
Missing Authorization vulnerability in Social Share Pro Social Share Icons & Social Share Buttons.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.6.2...
CVE-2024-32820 WordPress Social Share Icons & Social Share Buttons plugin <= 3.6.2 - Broken Access Control lead to Notice Dismissal vulnerability
Missing Authorization vulnerability in Social Share Pro Social Share Icons & Social Share Buttons.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.6.2...
CVE-2024-32820 WordPress Social Share Icons & Social Share Buttons plugin <= 3.6.2 - Broken Access Control lead to Notice Dismissal vulnerability
Missing Authorization vulnerability in Social Share Pro Social Share Icons & Social Share Buttons.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.6.2...
CVE-2024-32820
CVE-2024-32820 – Missing Authorization in WordPress plugin Social Share Icons & Social Share Buttons (Ultimate Social Media Plus) affects versions up to 3.6.2. Root cause: broken/absent access control allows unauthenticated actions on notices for the Social Share Icons & Social Share Buttons feat...
WordPress plugin Easy Social Share Buttons security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugi...
WordPress plugin Social Share Icons & Social Share Buttons security vulnerability
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin Social...
WordPress plugin WP Dark Mode security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-4997 WPUpper Share Buttons <= 3.43 - Missing Authorization
The WPUpper Share Buttons plugin for WordPress is vulnerable to unauthorized access of data when preparing sharing links for posts and pages in all versions up to, and including, 3.43. This makes it possible for unauthenticated attackers to obtain the contents of password protected posts and page...
WordPress WPUpper Share Buttons plugin <= 3.43 - Missing Authorization vulnerability
Missing Authorization vulnerability discovered by Krzysztof Zając in WordPress Plugin WPUpper Share Buttons versions = 3.43...
WordPress WPUpper Share Buttons Plugin <= 3.43 is vulnerable to Broken Access Control
Software WPUpper Share Buttons Type Plugin Vulnerable versions = 3.43 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-4997 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7221465742e4 Credits Krzysztof Zając Required...
WPUpper Share Buttons <= 3.43 - Missing Authorization
Description The WPUpper Share Buttons plugin for WordPress is vulnerable to unauthorized access of data when preparing sharing links for posts and pages in all versions up to, and including, 3.43. This makes it possible for unauthenticated attackers to obtain the contents of password protected...
The vulnerability of the smb2_reconnect_server() function in the Linux kernel-based SMB protocol client implementation allows a hacker to cause a service failure.
The vulnerability of the smb2reconnectserver function in the fs/smb/client/smb2pdu.c module of the SMB protocol client implementation in Linux operating systems is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service...