5161 matches found
CVE-2024-8233
Removed by vendor...
CVE-2024-9387
Removed by vendor...
Drupal Allow All File Extensions for file fields module * - Authenticated Other Vulnerability Type vulnerability
Authenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module Allow All File Extensions for file fields versions...
CVE-2023-51362
Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through = 2.1.3...
CVE-2024-53824
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in allbootstrapblocks All Bootstrap Blocks all-bootstrap-blocks allows PHP Local File Inclusion.This issue affects All Bootstrap Blocks: from n/a through = 1.3.19...
WordPress plugin All Bootstrap Blocks 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
DRUPAL-CONTRIB-2024-069
This module provides a field formatter for the field type 'file' called Table of files with download all link . The module had vulnerabilities allowing a user to download files they normally should not be able to download...
PT-2024-10085 · Drupal · Download All Files
Name of the Vulnerable Software and Affected Versions: Download All Files versions 0.0.0 through 2.0.1 Description: The issue is related to a Missing Authorization vulnerability in the Download All Files module for the Drupal CMS, which allows for Forceful Browsing. This vulnerability can be...
PT-2024-10137 · Drupal · Print Anything +1
Name of the Vulnerable Software and Affected Versions: Print Anything versions . Description: The issue is related to insufficient input validation in the Print Anything module of the Drupal CMS system. This can allow a remote attacker to execute arbitrary code. The problem affects all versions o...
Drupal Download All Files module < 2.0.2 - Unauthenticated Broken Access Control vulnerability
Unauthenticated Broken Access Control vulnerability discovered by Pierre Rudloff in WordPress Module Download All Files versions 2.0.2...
WordPress All Bootstrap Blocks plugin <= 1.3.20 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin All Bootstrap Blocks versions = 1.3.19...
Malicious code in all-dl-404 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c81b14656d59125b0a646d87c4351c27ca359a39cbc729ea08ba8ebc5a7e314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11129 Malicious code in all-dl-404 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c81b14656d59125b0a646d87c4351c27ca359a39cbc729ea08ba8ebc5a7e314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-11668
Removed by vendor...
Frankfurt Expansion Now Available for All Customers
Over the past year, Akamai’s core and distributed cloud architecture has grown significantly to better serve our customers requiring greater availability, lower latency, and more freedom of choice when it comes to how and where they run applications and workloads...
podman: podman machine spawns gvproxy with port bound to all IPs
A flaw was found in podman. The podman machine function used to create and manage Podman virtual machine containing a Podman process spawns a gvproxy process on the host system. The gvproxy API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall...
openSUSE Security Advisory (SUSE-SU-2024:4050-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Autolab 安全漏洞
Autolab is an open source course management service from Autolab. It supports automatically graded programming assignments. A security vulnerability exists in Autolab version 3.0.0 that stems from the ability of students to download all assignments from other students using the...
PT-2024-35697 · Autolab · Autolab
Name of the Vulnerable Software and Affected Versions: Autolab versions 3.0.0 through 3.0.2 Description: Autolab is a course management service that enables auto-graded programming assignments. The issue allows students to download all assignments from another student, as long as they are logged...
