4227 matches found
PT-2024-22518 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS. The issue is related to the "/dede/article keywords main.php" API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround,...
CVE-2024-28665
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleadd.php...
CVE-2024-28678
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...
PT-2024-22517 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS. The issue is related to the /dede/article edit.php API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting...
PT-2024-22506 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/article add.php component. This allows an attacker to perform unintended actions on the website. Recommendations: For DedeCMS version 5.7, as a...
CVE-2024-28678
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...
PT-2024-22433 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/article edit.php component. This allows for malicious requests to be made on behalf of the user. Recommendations: For DedeCMS version 5.7, as a...
PT-2024-22519 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS via the component /dede/article description main.php. This allows an attacker to perform unintended actions on the website. Recommendations: For...
Desdev DedeCMS Security Breach
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...
PT-2024-15847
Name of the Vulnerable Software and Affected Versions Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress versions up to, and including, 3.6.4 Description The issue allows authenticated attackers with subscriber access or higher to access functionality without...
2024-03 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5035857)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2024-03 Cumulative Update for Microsoft server operating system, version 22H2 for x64-based Systems (KB5035857)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2024-03 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5035855)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2024-03 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5035855)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
CVE-2024-28229
In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles...
CVE-2024-28229
CVE-2024-28229 affects JetBrains YouTrack prior to 2024.1.25893. The issue arises from insufficient authorization, allowing a user without appropriate permissions to restore issues and articles. Impact is limited to unauthorized restoration capability; no details about exploitation in the wild ar...
CVE-2024-27689
Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via /update-article.php...
Cross site request forgery (csrf)
Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via /update-article.php...
Stupid Simple CMS Security Vulnerability
Stupid Simple CMS is a content management system by codelyfe individual developer. A security vulnerability exists in Stupid Simple CMS v1.2.4, which stems from a cross-site request forgery CSRF vulnerability via /update-article.php...