4722 matches found
PT-2024-40424 · Stormpath · Stormpath-Sdk-Php
Name of the Vulnerable Software and Affected Versions: stormpath-sdk-php affected versions not specified Description: The issue is related to the use of an insecure random number generator RNG in the generation of UUID version 4 within the codebase. Recommendations: At the moment, there is no...
PT-2024-40538 · Silverstripe · Silverstripe
Name of the Vulnerable Software and Affected Versions: SilverStripe versions 4.0.0 SilverStripe versions 3.5 through 3.6 Description: The issue is related to a possible SQL injection vulnerability when performing a fulltext search. Specifically, the start querystring parameter is not escaped...
WordPress ProfilePress plugin <= 4.15.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ProfilePress User Panel Widget vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via ProfilePress User Panel Widget vulnerability discovered by wesley wcraft in WordPress Plugin ProfilePress versions = 4.15.8...
pcp: exposure of the redis server backend allows remote command execution via pmproxy
A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...
pcp: exposure of the redis server backend allows remote command execution via pmproxy
A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...
kernel: use-after-free in IPv4 IGMP
A race condition has been discovered in the Linux kernel's Internet Group Management Protocol IGMP implementation. This vulnerability may enable an attacker to provoke an application crash or potentially escalate privileges locally. By exploiting the race condition, an adversary could disrupt the...
WordPress NextScripts plugin <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting via User Agent vulnerability
Unauthenticated Stored Cross-Site Scripting via User Agent vulnerability discovered by Piotr Kuśpit in WordPress Plugin NextScripts versions = 4.4.3...
DEBIAN-CVE-2021-47322
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix an Oops in pnfsmarkrequestcommit when doing ODIRECT Fix an Oopsable condition in pnfsmarkrequestcommit when we're putting a set of writes on the commit list to reschedule them after a failed pNFS attempt...
UBUNTU-CVE-2021-47322
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix an Oops in pnfsmarkrequestcommit when doing ODIRECT Fix an Oopsable condition in pnfsmarkrequestcommit when we're putting a set of writes on the commit list to reschedule them after a failed pNFS attempt...
LCDS LAquis SCADA 路径遍历漏洞
LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of devices that have communication technology. A path traversal vulnerability exists in LCDS LAquis SCADA version 4.7.1....
CVE-2024-34370
Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a through 4.8.9...
CVE-2023-41956
Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.3.4...
WordPress plugin ProfilePress 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress plugin Car Dealer 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress SP Project & Document Manager plugin <= 4.71 - Data Update and File Download via IDOR vulnerability
Data Update and File Download via IDOR vulnerability discovered by fewwords in WordPress Plugin SP Project & Document Manager versions = 4.71...
CVE-2024-4383
The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpmpaypalsubscriptioncancellink' shortcode in all versions up to, and including, 4.4.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
UBUNTU-CVE-2024-4067
The NPM package micromatch prior to 4.0.8 is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability occurs in micromatch.braces in index.js because the pattern . will greedily match anything. By passing a malicious payload, the pattern matching will keep backtracking to the...
WordPress YITH WooCommerce Gift Cards plugin <= 4.12.0 - Missing Authorization to Unauthenticated WooCommerce Settings Update vulnerability
Missing Authorization to Unauthenticated WooCommerce Settings Update vulnerability discovered by Francesco Carlucci in WordPress Plugin YITH WooCommerce Gift Cards versions = 4.12.0...
T-Soft E-Commerce 安全漏洞
T-Soft E-Commerce is an e-commerce software from T-Soft. A security vulnerability exists in T-Soft E-Commerce 4. An attacker exploited the vulnerability to access and manipulate the database via specially crafted requests...
PT-2024-3673 · Siemens · Siemens Solid Edge
Name of the Vulnerable Software and Affected Versions: Siemens Solid Edge versions prior to V224.0 Update 4 Description: The issue is related to an out of bounds read in memory, which can be triggered by parsing specially crafted PAR files. This could allow an attacker to execute arbitrary code i...