18131 matches found
CVE-2024-3706
Information exposure vulnerability in OpenGnsys affecting version 1.1.1d Espeto. This vulnerability allows an attacker to view a php backup file controlaccess.php-LAST where database credentials are stored...
CVE-2024-3054
WPvivid Backup & Migration Plugin for WordPress (≤ version 0.9.99) is affected by a PHAR Deserialization vulnerability due to insufficient validation of tree_node[id] in wpvividstg_get_custom_exclude_path_free. The issue allows an authenticated attacker with admin-level access to cause PHAR-based...
PT-2024-23469 · WordPress · Wpvivid Backup & Migration Plugin
Name of the Vulnerable Software and Affected Versions: WPvivid Backup & Migration Plugin for WordPress versions up to, and including, 0.9.99 Description: The issue arises from insufficient path validation on the tree nodenodeid parameter, allowing authenticated attackers with admin-level access a...
CVE-2024-3054: Deserialization of Untrusted Data
WPvivid Backup & Migration Plugin for WordPress is vulnerable to PHAR Deserialization in all versions up to, and including, 0.9.99 via deserialization of untrusted input at the wpvividstggetcustomexcludepathfree action. This is due to the plugin not providing sufficient path validation on the...
OpenGnsys information leakage vulnerability
OpenGnsys is an open source computing device management software from the Spanish OpenGnsys project. An information disclosure vulnerability exists in OpenGnsys version 1.1.1d Espeto, which stems from the presence of an information exposure vulnerability that allows an attacker to view a php back...
WPvivid Backup & Migration Plugin < 0.9.100 - Admin+ PHAR Deserialization
Description The plugin is vulnerable to PHAR Deserialization in all versions up to, and including, 0.9.99 via deserialization of untrusted input at the wpvividstggetcustomexcludepathfree action. This is due to the plugin not providing sufficient path validation on the treenodenodeid parameter. Th...
PT-2024-24093 · Unknown · Stable-Diffusion-Webui
Name of the Vulnerable Software and Affected Versions: stable-diffusion-webui version 1.7.0 Description: The issue is related to a limited file write affecting Windows systems. It occurs in the create ui method Backup/Restore tab in modules/ui extensions.py, where user input is taken into the...
Virtuozzo Hybrid Infrastructure 6.1 Hotfix 1 (6.1.0-247)
In this release, Virtuozzo Hybrid Infrastructure enables selective updates of specific Kubernetes node groups, as well as provides stability and performance improvements. Vulnerability id: VSTOR-83526 Cannot filter backup plans by using the "Disabled" status. Vulnerability id: VSTOR-83662 Added...
WordPress Backup & Migration < 1.4.8 - Unauthenticated Sensitive Information Exposure
Description The WordPress Backup & Migration plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.7 via log files. This makes it possible for unauthenticated attackers to extract sensitive data from log files...
CVE-2024-31254
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.7...
CVE-2024-31254
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.7...
CVE-2024-31254 WordPress WordPress Backup & Migration plugin <= 1.4.7 - Sensitive Data Exposure via Log File vulnerability
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.7...
CVE-2024-31254
Technical details are not publicly provided in the supplied documents. No specifics on affected versions beyond 1.4.7, root cause, exploitability, or remediation are present. Monitor for updates.
CVE-2024-31254 WordPress WordPress Backup & Migration plugin <= 1.4.7 - Sensitive Data Exposure via Log File vulnerability
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.7...
WordPress Plugin: WordPress Backup & Migration security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-23897 · WordPress · Webtoffee Wordpress Backup & Migration
Name of the Vulnerable Software and Affected Versions: WebToffee WordPress Backup & Migration versions 1.4.7 and earlier Description: The issue is related to the insertion of sensitive information into log files. There is no information provided about the estimated number of potentially affected...
CVE-2024-31254: Insertion of Sensitive Information into Log File
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.7...
WordPress BackWPup plugin < 4.0.4 - Unauthenticated Backup Download vulnerability
Unauthenticated Backup Download vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin BackWPup versions 4.0.4...
Microsoft Windows BitLocker security vulnerability
Microsoft Windows BitLocker is a BitLocker by Microsoft Corporation USA Ensure secure backup of recovery keys before activating protection. A security vulnerability exists in Microsoft Windows BitLocker. An attacker exploiting this vulnerability could bypass certain features. The following produc...