Description of the security update for SharePoint Server Subscription Edition: May 14, 2024 (KB5002599)

None None...

Security Updates for Microsoft SharePoint Server Subscription Edition (May 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitra...

WooCommerce AWeber Newsletter Subscription < 4.0.3 - Missing Authorization to Access Token Modification

Description The WooCommerce AWeber Newsletter Subscription plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on a function in all versions up to, and including, 4.0.2. This makes it possible for unauthenticated attackers to reset and change...

CVE-2024-33944

Missing Authorization vulnerability in Kestrel WooCommerce AWeber Newsletter Subscription.This issue affects WooCommerce AWeber Newsletter Subscription: from n/a through 4.0.2...

CVE-2024-33944

CVE-2024-33944 is a Missing Authorization vulnerability affecting the WooCommerce AWeber Newsletter Subscription plugin for WordPress, with affected range up to version 4.0.2. The connected RH/Red Hat entry reiterates the Missing Authorization issue for this product. Public details in the provide...

CVE-2024-33944 WordPress WooCommerce AWeber Newsletter Subscription plugin <= 4.0.2 - Unauthenticated Access Token Change/Reset vulnerability

Missing Authorization vulnerability in Kestrel WooCommerce AWeber Newsletter Subscription.This issue affects WooCommerce AWeber Newsletter Subscription: from n/a through 4.0.2...

CVE-2024-33944: Missing Authorization

Missing Authorization vulnerability in Kestrel WooCommerce AWeber Newsletter Subscription.This issue affects WooCommerce AWeber Newsletter Subscription: from n/a through 4.0.2...

WordPress WooCommerce AWeber Newsletter Subscription plugin <= 4.0.2 - Unauthenticated Access Token Change/Reset vulnerability

Unauthenticated Access Token Change/Reset vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WooCommerce AWeber Newsletter Subscription versions = 4.0.2...

Wallos SQL注入漏洞

Wallos is an open source personal subscription tracker by the individual developer Miguel Ribeiro. A SQL injection vulnerability exists in Wallos versions prior to 1.15.3, which originates from an easy SQL injection via the category and payment parameters of /subscriptions/get.php...

WordPress WooCommerce AWeber Newsletter Subscription Plugin <= 4.0.2 is vulnerable to Settings Change

Software WooCommerce AWeber Newsletter Subscription Type Plugin Vulnerable versions = 4.0.2 Fixed in 4.0.3 OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2024-33944 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 016ccf61bb0f Credits Da...

PT-2024-25663

Name of the Vulnerable Software and Affected Versions O-RAN E2T I-Release affected versions not specified Description The issue concerns the O-RAN E2T I-Release Prometheus metric Increment function, which can crash in sctpThread.cpp. This crash occurs when the Increment function is called for...

CVE-2024-3730

The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpmpaypalsubscriptioncancellink' shortcode in all versions up to, and including, 4.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2024-3730

CVE-2024-3730 affects the Simple Membership WordPress plugin (versions up to and including 4.4.3). The flaw is a Stored XSS in the swpm_paypal_subscription_cancel_link shortcode due to insufficient input sanitization and output escaping of attributes. Exploitation requires an authenticated user w...

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE/EE versions 16.7 through 16.9.6, 16.10...

CVE-2024-4093

A vulnerability, which was classified as critical, was found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file viewapplication.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

CVE-2024-4093

CVE-2024-4093 affects SourceCodester Simple Subscription Website 1.0. A SQL injection vulnerability exists in view_application.php caused by manipulating the id parameter in an unknown function, enabling remote exploitation. Multiple connected sources confirm a critical severity with high impact ...

CVE-2024-4093 SourceCodester Simple Subscription Website view_application.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file viewapplication.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

CVE-2024-4093 SourceCodester Simple Subscription Website view_application.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file viewapplication.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

CVE-2024-4093: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file viewapplication.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

Simple Subscription Website SQL注入漏洞

Simple Subscription Website is an open source, web-based simple subscription application by Carlo Montero Personal Developer. It is used to provide companies with possible members to apply for plans that offer certain services. A SQL injection vulnerability exists in Simple Subscription Website...