8 matches found
WordPress WordPress Auction plugin <= 3.7 - Editor+ Stored XSS vulnerability
Editor+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin WordPress Auction Plugin versions = 3.7...
PT-2023-19881 · Unknown · Buy Me A Coffee
Name of the Vulnerable Software and Affected Versions: Buy Me a Coffee versions 3.7 and earlier Description: A Missing Authorization issue has been identified. This issue affects Buy Me a Coffee, indicating a potential lack of proper authorization checks. Recommendations: For versions 3.7 and...
DEBIAN-CVE-2022-43500
Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7...
UBUNTU-CVE-2019-14828
A vulnerability was found in Moodle affecting 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where users with the capability to create courses were assigned as a teacher in those courses, regardless of whether they had the capability to be automatically assigned that...
UBUNTU-CVE-2020-25703
The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5 and 3.7 to 3.7.8. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, and 3.10...
WordPress Access Control Error Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An access control error vulnerability exists in WordPress versions 3.7 through 5.4. The vulnerability arises...
CVE-2018-14788
Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerability occurs when parsing certain file types...
Cybozu Garoon Directory Traversal Vulnerability (CNVD-2016-03722)
Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A directory traversal...