WordPress profile-builder plugin access control error vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ninja-forms is a contact form builder plugin that uses it. simple-login-log is a user login logging plugin that uses it...

WordPress rich-counter plugin injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. rich-counter is a counter plugin used in it. There is an injection vulnerability in the WordPress rich-counter plugin, and no detailed...

CloudBees Jenkins Netsparker Cloud Scan Plugin Authorization Issues Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Netsparker Cloud Scan Plugin is used in one of...

CloudBees Jenkins Kmap Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Kmap Plugin is used in one of the application release...

MicroDigital N-series cameras Access Control Error Vulnerability

MicroDigital N-series cameras is an N-series network camera from MicroDigital Korea. An access control error vulnerability exists in MicroDigital N-series cameras. No details of the vulnerability are available at this time...

cPanel Injection Vulnerability

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. An injection vulnerability exists in cPanel versions prior to 74.0.0. The vulnerability stems from a lack of proper...

Notepad++ v7.6.3 print dialog box suffers from a buffer overflow vulnerability

Notepad++ is a suite of text editors for the Windows operating system Software Copyright License: GPL, with a complete Chinese language interface and support for multi-language writing UTF8 technology. A buffer overflow vulnerability exists in the Notepad++ v7.6.3 print dialog, no details of the...

cPanel Information Disclosure Vulnerability (CNVD-2019-33881)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in cPanel, and no details of the vulnerability are available at this time...

CVE-2019-11694

A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. Note: this issue only...

UBUNTU-CVE-2019-11694

A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. Note: this issue only...

FFmpeg Code Problem Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A code issue vulnerability exists in FFmpeg version 4.1.3. The vulnerability arises from a design or implementation issue during code development for a networked system or product. No detai...

Logitech Unifying Device Injection Vulnerability

Logitech Unifying is a USB type signal receiver from Logitech, Switzerland. An injection vulnerability exists in the Logitech Unifying device. No detailed vulnerability details are available at this time...

PT-2019-16915 · Ibm · Ibm Planning Analytics

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics version 2.0 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

XnView Classic Buffer Overflow Vulnerability (CNVD-2019-22429)

XnView is a multi-platform software that supports image viewing, conversion and editing. A buffer overflow vulnerability exists in XnView Classic. No details of the vulnerability are available at this time...

CVE-2019-12904

In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. The C implementation is used on platforms where an assembly-language implementation is unavailable. NOTE: the vendor's position is...

CVE-2018-18878

In firmware version MS2.6.9900 of Columbia Weather MicroServer, the BACnet daemon does not properly validate input, which could allow a remote attacker to send specially crafted packets causing the device to become unavailable...

Command Injection in fs-path

All versions of fs-path are vulnerable to command injection is unsanitized user input is passed in. Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this module until a fix is available...

Intel ACU Wizard Privilege License and Access Control Issues Vulnerability

Intel ACU Wizard is an AMT configuration utility program from Intel Corporation USA. Intel ACU Wizard is vulnerable to a privilege permission and access control issue. The vulnerability stems from a lack of effective privilege permission and access control measures in a networked system or produc...

SAP HANA Code Issue Vulnerability

SAP HANA is a set of high-performance real-time data analytics platform from Germany's SAP SAP. The platform provides data query functions to support users to query real-time business data query and analysis. SAP HANA has a code issue vulnerability that originates from an improperly designed or...

PT-2021-17847 · Alt Linux · Alt Linux

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not explicitly provided, but it mentions an update to python3 version 3.7.3-alt1. No details are given about the nature of the issue or its potential...