1282 matches found
WordPress WPCargo Track & Trace plugin <= 6.9.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Raul in WordPress WPCargo Track & Trace plugin versions = 6.9.4. Solution Update the WordPress WPCargo Track & Trace plugin to the latest available version at least 6.9.5...
ALPINE-CVE-2022-26356
Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty whil...
The vulnerability of the gf_hinter_track_process function in the isom_hinter_track_process.c component of the multimedia platform GPAC allows a intruder to access confidential data and also trigger a service failure.
The vulnerability of the gfhintertrackprocess function in the isomhintertrackprocess.c component of the multimedia platform GPAC is related to writing beyond buffer boundaries. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause a service...
Adobe Acrobat DC (Continuous) Security Update (APSB21-29) - Windows
Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Adobe Acrobat DC (Continuous) Security Update (APSB21-29) - Mac OS X
Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
CVE-2021-25003
The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE...
CVE-2021-25003
The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE...
Design/Logic Flaw
The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE...
CVE-2021-25003
The CVE-2021-25003 vulnerability affects WordPress WPCargo Track & Trace plugin prior to version 6.9.0. A crafted file in the plugin can allow an unauthenticated attacker to write a PHP file anywhere on the web server, enabling remote code execution (RCE). The issue is documented as unauthenticat...
PT-2022-9560 · Unknown · Wpcargo Track & Trace
Name of the Vulnerable Software and Affected Versions: WPCargo Track & Trace versions prior to 6.9.0 Description: The issue allows unauthenticated attackers to write a PHP file anywhere on the web server, leading to remote code execution RCE. Recommendations: For versions prior to 6.9.0, update t...
WordPress plugin WPCargo Track & Trace 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...
Vulnerabilities fixed in BMC Track-It!
BMC has fixed several vulnerabilities in Track-It! A malicious party could exploit the vulnerabilities to gain access to the application or to execute arbitrary code under the application's privileges. The vulnerability with reference CVE-2022-24047 involves an "authentication bypass" that allows...
CVE-2022-24047
This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...
CVE-2022-24047
This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...
CVE-2022-24047
This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...
CVE-2022-24047
CVE-2022-24047 affects BMC Track-It! 20.21.01.102 where an HTTP authorization flaw permits remote authentication bypass without credentials. Root cause: lack of authentication prior to accessing functionality, enabling an unauthenticated attacker to bypass login. Multiple sources (including ZDI-2...
Track-It! 授权问题漏洞
Bmc Software Track-It! is an It helpdesk software from Bmc Software, USA. for helpdesks and service desks with asset management. A security vulnerability exists in BMC Track-It! that stems from a lack of authentication before allowing access to features. An attacker could exploit this vulnerabili...
BMC Track-It! HTTP Module Improper Access Control Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It!. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of authentication prior...
IBM Financial Transaction Manager Authorization Issue Vulnerability (CNVD-2022-08965)
IBM Financial Transaction Manager is a financial transaction manager from IBM Corporation in the United States. The product is primarily used to monitor, track and report financial payments and transactions. IBM Financial Transaction Manager 3.2.4 contains an authorization issue vulnerability tha...