3125 matches found
CVE-2023-51670
Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...
CVE-2024-0160
Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS...
CVE-2024-0160
CVE-2024-0160 affects Dell Client Platform: an incorrect authorization vulnerability that could allow bypassing BIOS authorization to modify BIOS settings via physical access. Documents consistently describe the issue as Dell Client Platform with the risk arising from improper BIOS/authentication...
CVE-2024-0160
Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS...
Dell Client Platform 安全漏洞
Dell Client platforms are a client platform from Dell USA. The Dell Client Platform suffers from an authorization issue vulnerability that stems from the presence of incorrect authorization, which can be exploited by an attacker to bypass BIOS authorization and modify settings in the BIOS...
CVE-2024-34804 WordPress Tagembed plugin <= 5.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8...
CVE-2024-34753
CVE-2024-34753 corresponds to a Missing Authorization (Broken Access Control) vulnerability affecting WordPress Radio Player (SoftLab Radio Player). Connected sources identify the affected package as Radio Player for WordPress, with versions listed as n/a through 2.0.73. The root cause is an auth...
CVE-2024-35168 WordPress WP Discourse plugin <= 2.5.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1...
CVE-2023-52183
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.3...
CVE-2024-35667
CVE-2024-35667: Missing Authorization vulnerability in WP EasyCart ≤ 5.5.19. Affected: WP EasyCart plugin for WordPress. Base CVSS 3.1 v3: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N; Base score 5.3 (Medium). Root cause/affected versions are stated; no exploit details or remediation are provided in the i...
Arbitrary File Deletion
litellm is vulnerable to Arbitrary File Deletion. The vulnerability is due to improper input validation on the /audio/transcriptions endpoint, allowing attackers to send crafted requests that delete specified files without proper authorization or validation...
CVE-2024-31402
Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker to delete the data of Shared To-Dos...
CVE-2024-31403
Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 6.0.0 allows a remote authenticated attacker to alter and/or obtain the data of Memo...
CVE-2024-37176 Missing Authorization check in SAP BW/4HANA Transformation and DTP
SAP BW/4HANA Transformation and Data Transfer Process DTP allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low...
CVE-2024-35722
Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...
CVE-2024-35724
CVE-2024-35724 is a Missing Authorization vulnerability reported for Bosa Elementor Addons and Templates for WooCommerce, affecting the plugin for versions up to 1.0.12. Connected sources (Red Hat, ENISA EUVD, Patchstack/NVD entries) indicate an unauthenticated bypass with high impact (C/H/I/A) a...
CVE-2024-35729 WordPress Tickera – WordPress Event Ticketing plugin <= 3.5.2.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Tickera.This issue affects Tickera: from n/a through 3.5.2.6...
WordPress plugin 12 Step Meeting List security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...