CVE-2024-12773 Altra Side Menu <= 2.0 - Admin+ SQL Injection

The Altra Side Menu WordPress plugin through 2.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

CVE-2024-12773

CVE-2024-12773 affects the WordPress plugin Altra Side Menu (versions up to 2.0). The issue arises when an input parameter is not sanitized/escaped before being used in a SQL statement, enabling admins to perform SQL injection. The CVE notes an in-site impact of high severity (base CVSS 3.1 score...

CVE-2024-12773 Altra Side Menu <= 2.0 - Admin+ SQL Injection

The Altra Side Menu WordPress plugin through 2.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

PT-2025-1949

Name of the Vulnerable Software and Affected Versions Altra Side Menu WordPress plugin through 2.0 Description The issue is related to the lack of CSRF checks in some places, which could allow attackers to make logged-in admins delete arbitrary menus via a CSRF attack. This could potentially be...

PT-2025-1948 · WordPress · Altra Side Menu

Name of the Vulnerable Software and Affected Versions: Altra Side Menu WordPress plugin versions 2.0 and earlier Description: The issue allows admins to perform SQL injection attacks due to a parameter not being sanitized and escaped before use in a SQL statement. Recommendations: Altra Side Menu...

WordPress plugin Altra Side Menu 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Altra Side Menu 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2022-46892

In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex...

CVE-2022-46892

In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex...

Ampere Computing Ampere Altra 安全漏洞

Ampere Computing Ampere Altra is an 80-core server processor from Ampere Computing, USA. A security vulnerability exists in Ampere AltraMax versions prior to 2.10c and Ampere Altra versions prior to 2.10c, which stems from incorrect access control and allows the operating system to reinitialize a...

CVE-2022-46892

CVE-2022-46892 affects Ampere AltraMax and Ampere Altra before 2.10c; improper access controls could allow the OS to reinitialize a disabled root complex. Impact is rated high (C/H/I/A). Remediation: upgrade to 2.10c or later per Ampere security bulletin; descriptions appear in NVD/Red Hat/CNNVD ...

CVE-2022-46892

In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex...

CVE-2022-35888

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system...

CVE-2022-35888

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system...

Design/Logic Flaw

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system...

CVE-2022-35888

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system...

CVE-2022-35888

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system...

CVE-2022-35888

CVE-2022-35888 affects Ampere Altra and Ampere Altra Max devices through 2022-07-15. The issue enables Hertzbleed, a power side-channel attack that can extract secret information by correlating CPU power consumption with processed data. The base CVSS vector indicates Network attack vector, low at...

Ampere Computing Ampere Altra 安全漏洞

Ampere Computing Ampere Altra is an 80-core server processor from Ampere Computing, USA. A security vulnerability exists in Ampere Altra and Ampere Altra Max 2022-7-15 and prior versions, which stems from an attack that allows via Hertzbleed, secret information to be extracted from the CPU by...

PT-2022-22998 · Ampere · Ampere Altra +1

Name of the Vulnerable Software and Affected Versions: Ampere Altra and Ampere Altra Max devices affected versions not specified Description: The issue allows attacks via Hertzbleed, a power side-channel attack that extracts secret information from the CPU by correlating the power consumption wit...