PT-2024-19530

Name of the Vulnerable Software and Affected Versions keerti1924 Online-Book-Store-Website version 1.0 Description A critical issue has been found in the keerti1924 Online-Book-Store-Website, affecting an unknown functionality of the file /search.php. The manipulation of the search argument leads...

Online-Book-Store-Website Security Vulnerability

Online-Book-Store-Website is an online bookstore website. A security vulnerability exists in Online-Book-Store-Website version 1.0, which is caused by a business logic error in the productprice parameter of the /shop.php file...

Online-Book-Store-Website SQL Injection Vulnerability

Online-Book-Store-Website is an online bookstore website. A SQL injection vulnerability exists in Online-Book-Store-Website version 1.0, which originates from a SQL injection vulnerability in the search parameter of the /search.php file...

CVE-2024-2270: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /signup.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The...

CVE-2024-2269: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The...

BIT-MAGENTO-2021-28584 Magento Commerce path traversal vulnerability in child theme store creation

Magento versions 2.4.2 and earlier, 2.4.1 and earlier and 2.3.6 and earlier are affected by a Path Traversal vulnerability when creating a store with child theme.Successful exploitation could lead to arbitrary file system write by an authenticated attacker. Access to the admin console is required...

BIT-JAEGER-2020-10750

Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container's log file to discover the Kafka credentials...

SUSE CVE-2023-52522

In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neighperiodicwork While looking at a related syzbot report involving neighperiodicwork, I found that I forgot to add an annotation when deleting an RCU protected item from a list. Readers use...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, kubeflow-katib, prometheus-beat-exporter-fips, php-fpmexporter, helm-push, rook, kine, aws-efs-csi-driver-fips, cfssl, spark-operator, prometheus-adapter-fips, local-path-provisioner, dynamic-localpv-provisioner-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws, k3s, prometheus-alertmanager, gomplate, grafana-operator, crossplane-provider-azure-storage, flux-notification-controller, k8sgpt, dynamic-localpv-provisioner, crossplane-provider-aws-kms, kube-logging-operator, flux-source-controller,...

Online Mobile Store Management System Cross-Site Scripting Vulnerability

Online Mobile Store Management System is an online mobile store management system. A cross-site scripting vulnerability exists in Online Mobile Store Management System version 1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the /?p=products file, and ca...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, kubeflow-katib, prometheus-beat-exporter-fips, php-fpmexporter, helm-push, rook, kine, aws-efs-csi-driver-fips, cfssl, spark-operator, prometheus-adapter-fips, local-path-provisioner, dynamic-localpv-provisioner-fips,...

Important: Red Hat Enhancement Advisory: redis:7 update

An update for the redis:7 module is now available for Red Hat Enterprise Linux 9. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set...

CVE-2024-1088 Password Protected Store for WooCommerce <= 2.2 - Information Exposure via REST API

The Password Protected Store for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the REST API. This makes it possible for unauthenticated attackers to extract sensitive data including post titles and content...

CVE-2024-1088

The Password Protected Store for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9 via the REST API. This makes it possible for unauthenticated attackers to extract sensitive data including post titles and content...

CVE-2024-1088

The CVE-2024-1088 entry covers the Password Protected Store for WooCommerce WordPress plugin, which allows unauthenticated REST API access to sensitive data (post titles and content) in all versions up to 1.9. Public sources corroborate this information and indicate a mitigation/patch: version 2....

CVE-2024-1088: Improper Access Control

The Password Protected Store for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the REST API. This makes it possible for unauthenticated attackers to extract sensitive data including post titles and content...

PT-2024-16613

Name of the Vulnerable Software and Affected Versions Password Protected Store for WooCommerce plugin for WordPress versions up to, and including, 1.9 Description The issue allows unauthenticated attackers to extract sensitive data, including post titles and content, via the REST API. This makes ...

WordPress Plugin Password Protected Store for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Dell Secure Connect Gateway Cross-Site Scripting Vulnerability (CNVD-2024-20302)

Dell Secure Connect Gateway is a secure connectivity gateway from Dell USA. Dell Secure Connect Gateway suffers from a cross-site scripting vulnerability that stems from a cross-site scripting vulnerability in the Policy Manager inclusion store. No detailed vulnerability details are provided at...