13351 matches found
CVE-2025-30881
Missing Authorization vulnerability in ThemeHunk Big Store allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Big Store: from n/a through 2.0.8...
CVE-2025-30881
Missing Authorization vulnerability in themehunk Big Store big-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Big Store: from n/a through = 2.0.8...
WordPress Big Store theme <= 2.0.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Thaleikis in WordPress Theme Big Store versions = 2.0.8...
CVE-2025-30881 WordPress Big Store theme <= 2.0.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in themehunk Big Store big-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Big Store: from n/a through = 2.0.8...
CVE-2025-30881
CVE-2025-30881 affects the WordPress theme Big Store (ThemeHunk) and is disclosed as a Missing Authorization vulnerability for Big Store versions up to 2.0.8. Connected Wordfence content confirms the issue is real for Big Store and shows a Patched status, indicating a fix exists in a subsequent r...
CVE-2025-30881 WordPress Big Store theme <= 2.0.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in themehunk Big Store big-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Big Store: from n/a through = 2.0.8...
PT-2025-25661
Name of the Vulnerable Software and Affected Versions Big Requests extension affected versions not specified Description A flaw was found in the Big Requests extension, where the request length is multiplied by 4 before checking against the maximum allowed size. This can potentially cause an...
WordPress plugin Big Store 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
F5 Networks BIG-IP : AngularJS XSS vulnerability (K32412075)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K32412075 advisory. angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code...
BIT-UNIXODBC-2024-1013
An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken...
Azure Linux 3.0 Security Update: unixODBC (CVE-2024-1013)
The version of unixODBC installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1013 advisory. - An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 byte...
How to Avoid US-Based Digital Services—and Why You Might Want To
Amid growing concerns over Big Tech firms aligning with Trump administration policies, people are starting to move their digital lives to services based overseas. Here's what you need to know...
CVE-2023-28207
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A plug-in may be able to inherit app permissions and access user data...
CVE-2023-28207
The CVE affects Apple macOS: Ventura 13.3, Monterey 12.6.4, and Big Sur 11.7.5. The issue involves a plug-in that may inherit application permissions and access user data. The fix is described as implemented via “improved checks.” Root cause and specific vulnerable component aren’t explicitly det...
CVE-2023-28207
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A plug-in may be able to inherit app permissions and access user data...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura prior to 13.3, macOS Monterey prior to 12.6.4, and macOS Big Sur prior to 11.7.5, which stems from a plug-in that may...
postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
...
F5 Networks BIG-IP : libarchive vulnerability (K000150321)
The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.3. It is, therefore, affected by a vulnerability as referenced in the K000150321 advisory. The archivewstringappendfrommbs function in archivestring.c in libarchive 3.2.2 allows remote attackers to cause a...
Unauthorized Access Vulnerability in Cultural AI Management System of Sichuan Cultural Big Data Co.
Sichuan Cultural Big Data Limited Liability Company is mainly engaged in big data services, data processing and storage support services, Internet data services, cloud computing equipment technology services, artificial intelligence basic resources and technology platforms, artificial intelligenc...