5376 matches found
PT-2024-16749 · WordPress · Simple Membership
Name of the Vulnerable Software and Affected Versions: The Simple Membership plugin for WordPress versions up to, and including, 4.5.5 Description: The issue allows unauthenticated attackers to extract sensitive data from restricted posts via the WordPress core search feature. This makes it...
CVE-2024-10855 Image Optimizer, Resizer and CDN – Sirv <= 7.3.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Deletion
The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to insufficient validation on the filename parameter of the sirvuploadfilebychunks function and lack of in all versions up to, and including...
CVE-2019-18845
creationtimestamp| type| source ---|---|--- 2024-11-14 06:09:10+00:00| seen| MISP/18895998-6bd6-4002-b1b1-d8b1c5404a11...
CVE-2024-49370 Change-Password via Portal-Profile sets PimcoreBackendUser password without hashing
Pimcore is an open source data and experience management platform. When a PortalUserObject is connected to a PimcoreUser and "Use Pimcore Backend Password" is set to true, the change password function in Portal Profile sets the new password. Prior to Pimcore portal engine versions 4.1.7 and 3.1.1...
Oracle E-Business Suite 安全漏洞
Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle E-Business Suite...
Unspecified vulnerability in Linux kernel (CNVD-2024-39469)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a data corruption issue in the md/raid1 component. No details of the vulnerability are provided at this time...
ROS-20240704-06
Vulnerability of logback receiver component of logging library logback is related to recovery of inaccurate data in memory inaccurate data. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
PT-2024-37250 · Imartinez · Privategpt
Name of the Vulnerable Software and Affected Versions: imartinez/privategpt version 0.5.0 Description: A Cross-Site Request Forgery CSRF issue allows an attacker to delete all uploaded files on the server, leading to data loss and service disruption for the application's users. Recommendations: F...
Important: Red Hat Security Advisory: RHACS 4.4 enhancement and security update
Updated images are now available for Red Hat Advanced Cluster Security. The updated image includes changes, bug fixes, and updates to patch vulnerabilities. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
CVE-2024-4151
An Improper Access Control vulnerability exists in lunary-ai/lunary version 1.2.2, where users can view and update any prompts in any projects due to insufficient access control checks in the handling of PATCH and GET requests for template versions. This vulnerability allows unauthorized users to...
CVE-2024-3761 Missing Authorization on Delete Datasets in lunary-ai/lunary
In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at packages/backend/src/api/v1/datasets is vulnerable to unauthorized dataset deletion due to missing authorization and authentication mechanisms. This vulnerability allows any user, even those without a valid token, to delete a datas...
CVE-2024-27404 mptcp: fix data races on remote_id
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data races on remoteid Similar to the previous patch, address the data race on remoteid, adding the suitable ONCE annotations...
CVE-2023-52614
creationtimestamp| type| source ---|---|--- 2024-03-18 12:26:53+00:00| seen| https://t.me/ctinow/210441 2024-03-18 14:31:53+00:00| seen| https://t.me/ctinow/210554 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
BIT-GITLAB-2021-22244
Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data...
Missing Permission Checks
com.hazelcast:hazelcast is vulnerable to Missing Permission Checks. The vulnerability is due to some client operations not checking permissions properly. This flaw allowing authenticated users to access data stored in the cluster...
PT-2024-18904
Name of the Vulnerable Software and Affected Versions dash-core-components versions prior to 2.13.0 dash versions prior to 2.15.0 dash-html-components versions prior to 2.0.16 Description The issue allows an authenticated attacker to steal data visible to another user who opens a view that exploi...
Application Security Posture Management
Accelerating the Remediation of Vulnerabilities From Code To Cloud Written by Eric Sheridan, Chief Innovation Officer, Tromzo In this guest blog post by Eric Sheridan, Chief Innovation Officer at valued Rapid7 partner Tromzo, you’ll learn how Rapid7 customers can utilize ASPM solutions to...
PT-2023-7266 · Xen +2 · Xen +2
Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue arises from a mismatch in the IOMMU quarantine page table levels. On systems with no RAM above the 512GB mark, only 3 page-table levels are configured in the IOMMU, while the quaranti...
Qualys Is the Outperformer in the New GigaOm Radar Report for Continuous Vulnerability Management
GigaOm has unveiled its third-annual Radar for Continuous Vulnerability Management featuring Qualys. In this Report, GigaOm provides a detailed analysis of the value and progression of vulnerability management VM capabilities to help organizations build the best security and vulnerability...
