WordPress Hello Agency Theme <= 1.0.5 is vulnerable to Broken Access Control

Software Hello Agency Type Theme Vulnerable versions = 1.0.5 Fixed in 1.0.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43341 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID dad92fd9c880 Credits Fariq Fadillah Gusti Insani...

WordPress Purity Of Soul Theme <= 1.9 is vulnerable to Cross Site Scripting (XSS)

Software Purity Of Soul Type Theme Vulnerable versions = 1.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43348 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2e3680e055fd Credits justakazh Required privilege...

WordPress Plugin Notes Plus Plugin <= 1.2.7 is vulnerable to Arbitrary Content Deletion

Software Plugin Notes Plus Type Plugin Vulnerable versions = 1.2.7 Fixed in 1.2.8 OWASP Top 10 A1: Broken Access Control Classification Arbitrary Content Deletion CVE CVE-2024-43326 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 048345824ef6 Credits Trương Hữu Phúc...

zvut.cz Cross Site Scripting vulnerability OBB-3956764

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Updates for Microsoft Visual Studio Products (August 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - .NET and Visual Studio Information Disclosure Vulnerability. CVE-2024-38167 - .NET Core and Visual Studio Denial of Service Vulnerability. CVE-2024-38168 Note...

CVE-2024-41719

creationtimestamp| type| source ---|---|--- 2024-08-14 18:13:52+00:00| seen| https://t.me/cvedetector/3172...

CVE-2024-41727

creationtimestamp| type| source ---|---|--- 2024-08-14 18:13:50+00:00| seen| https://t.me/cvedetector/3170...

CVE-2024-25939

creationtimestamp| type| source ---|---|--- 2024-08-14 17:23:15+00:00| seen| https://t.me/cvedetector/3146...

CVE-2024-39411

creationtimestamp| type| source ---|---|--- 2024-08-14 14:52:25+00:00| seen| https://t.me/cvedetector/3121...

K000140552: Quarterly Security Notification (August 2024)

Security Advisory Description On August 14, 2024, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities and security exposures to help determine the impact to your F5 devices. You can find the details of each issue in the associated...

palapapos.co.id Cross Site Scripting vulnerability OBB-3956673

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

What’s New for Developers: August 2024

...

Security Updates for Microsoft Dynamics 365 (on-premises) (August 2024)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by an cross-site scripting vulnerability. An attacker can exploit this to disclose potentially sensitive information and potenital hijack a user session. Note that Nessus has not tested for these issues...

Security Updates for Microsoft Office Products (August 2024) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the august-13-2024 advisory. - Microsoft Excel Remote Code Execution Vulnerability CVE-2024-38170, CVE-2024-38172 - Microsoft PowerPoint Remote Code Execution Vulnerabilit...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Aug 2024)

This host is missing a critical security update according to Microsoft Office Click-to-Run update August 2024. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Patch Tuesday - August 2024

Microsoft is addressing 88 vulnerabilities this August 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for ten of the vulnerabilities published today, which is significantly more than usual. At time of writing, all six of the known-exploited...

Patch Tuesday - August 2024

Microsoft is addressing 88 vulnerabilities this August 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for ten of the vulnerabilities published today, which is significantly more than usual. At time of writing, all six of the known-exploited...

Microsoft and Adobe Patch Tuesday, August 2024 Security Update Review

Microsoft’s August Patch Tuesday updates are out, and they address a range of vulnerabilities across multiple products. Let’s dive into the key updates and their implications. Microsoft Patch Tuesday for August 2024 Microsoft Patchs Tuesday, August 2024 edition addressed 102 vulnerabilities,...

CVE-2024-38140

creationtimestamp| type| source ---|---|--- 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review 2024-08-24 19:32:31+00:00| seen| Telegram/LfogUMBxGpVn17H6Uo0yXtk68arkJ9YyItezZVoolePyzdw...

CVE-2024-38173

creationtimestamp| type| source ---|---|--- 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review 2024-08-14 17:13:56+00:00| seen| Telegram/KYEFV-F3cl5xPWEjYrYe9Vlstki5jmveIWxaITc6BK4ezew 2024-08-14 19:24:53+00:00| published-proof-of-concept...