CVE-2024-42354: Improper Access Control

Shopware is an open commerce platform. The store-API works with regular entities and not expose all fields for the public API; fields need to be marked as ApiAware in the EntityDefinition. So only ApiAware fields of the EntityDefinition will be encoded to the final JSON. Prior to versions 6.6.5.1...

PT-2024-38024 · WordPress +1 · Orchid Store +1

Name of the Vulnerable Software and Affected Versions: Orchid Store theme for WordPress versions up to, and including, 1.5.6 Description: The issue is related to a missing capability check on the orchid store activate plugin function, allowing authenticated attackers with Subscriber-level access...

SUSE CVE-2024-42160

In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fsbuildfaultattr - It missed to check validation of fault attrs in parseoptions, let's fix to add check condition in f2fsbuildfaultattr. - Use f2fsbuildfaultattr in sbistore to clean up...

Amazon Linux 2023 : ca-certificates (ALAS2023-2024-682)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-682 advisory. Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.05.30 and prior to 2024.07...

Memory race condition in ssl.SSLContext certificate store methods

...

September 20, 2022—KB5017381 (OS Build 20348.1070) Preview

September 20, 2022—KB5017381 OS Build 20348.1070 Preview Applies To Windows Server 2022 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history...

August 16, 2022—KB5016693 (OS Build 20348.946) Preview

August 16, 2022—KB5016693 OS Build 20348.946 Preview Applies To Windows Server 2022 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page...

November 15, 2022—KB5019157 (OS Build 22000.1281) Preview

November 15, 2022—KB5019157 OS Build 22000.1281 Preview Applies To Windows 11 version 21H2, all editions Note 11/8/22 IMPORTANT Because of minimal operations during the holidays and the upcoming Western new year, there won’t be a non-security preview release for the month of December 2022. There...

September 30, 2022—KB5017389 (OS Build 22621.608) Preview

September 30, 2022—KB5017389 OS Build 22621.608 Preview Applies To Windows 11 version 22H2, all editions Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 11, version 22H2, see...

WordPress Ebook Store plugin <= 5.8001 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Ebook Store versions = 5.8001...

CVE-2024-6567

The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.8001. This is due to the plugin utilizing fpdi-protection and not preventing direct access to test files that have displayerrors set to true. This makes it possible for unauthenticat...

CVE-2024-6567

The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.8001. This is due to the plugin utilizing fpdi-protection and not preventing direct access to test files that have displayerrors set to true. This makes it possible for unauthenticat...

CVE-2024-6567 Ebook Store <= 5.8001 - Unauthenticated Full Path Disclosure

The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.8001. This is due to the plugin utilizing fpdi-protection and not preventing direct access to test files that have displayerrors set to true. This makes it possible for unauthenticat...

CVE-2024-6567

CVE-2024-6567 affects the WordPress Ebook Store plugin (versions up to 5.8001). The root cause is a Full Path Disclosure caused by the plugin using fpdi-protection and failing to block direct access to test files that have display_errors enabled. This unauthenticated disclosure can reveal the web...

WordPress Ebook Store Plugin <= 5.8001 is vulnerable to Sensitive Data Exposure

Software Ebook Store Type Plugin Vulnerable versions = 5.8001 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6567 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4d20c9d6d85a Credits stealthcopter Required privileg...

MS05-012: Vulnerability in OLE and COM could allow remote code execution

MS05-012: Vulnerability in OLE and COM could allow remote code execution Applies To Windows Microsoft has released security bulletin MS05-012. The security bulletin contains all the relevant information about the security update, including file manifest information and deployment options. To view...

CVE-2024-6567: Exposure of Sensitive Information to an Unauthorized Actor

The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.8001. This is due to the plugin utilizing fpdi-protection and not preventing direct access to test files that have displayerrors set to true. This makes it possible for unauthenticat...

PT-2024-37723 · WordPress · Ebook Store

Name of the Vulnerable Software and Affected Versions: Ebook Store plugin for WordPress versions up to, and including, 5.8001 Description: The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure due to the plugin utilizing fpdi-protection and not preventing direct access to tes...

WordPress plugin EBook Store has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

January 17, 2019—KB4480974 (Preview of Monthly Rollup)

January 17, 2019—KB4480974 Preview of Monthly Rollup Applies To Windows Server 2008 Service Pack 2 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4480968 released January 8, 2019 and also includes these new quality improvements as a preview o...