3324 matches found
PT-2022-14005
Name of the Vulnerable Software and Affected Versions Bulk Page Creator WordPress plugin versions prior to 1.1.4 Description The issue concerns the lack of nonce checks for page creation functionalities, making them susceptible to Cross-Site Request Forgery CSRF attacks. CSRF is a type of attack...
CVE-2022-1611: Cross-Site Request Forgery (CSRF)
The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF...
CVE-2021-27783
User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...
Code injection
User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...
CVE-2021-27783 HCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposure
User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...
CVE-2021-27783
CVE-2021-27783 concerns HCL Technologies BigFix Mobile/Modern Client Management (versions v2.0 and v2.1). Affected component: PPKG files generated during user Bulk Enroll. Root cause: unencrypted sensitive information exposed within these PPKG files. Impact: information disclosure, enabling expos...
PT-2022-9868
Name of the Vulnerable Software and Affected Versions Microsoft Intune affected versions not specified Description The issue concerns user-generated PPKG files for Bulk Enroll, which may expose unencrypted sensitive information. Recommendations At the moment, there is no information about a newer...
CVE-2021-27783: Missing Encryption of Sensitive Data
User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...
GHSA-P7RM-GH9G-5FR8 Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action...
Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action...
CVE-2022-30596
A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...
Cross-site Scripting in moodle
A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...
CVE-2021-27783
User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...
CVE-2022-30596
A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...
CVE-2022-30596
A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...
UBUNTU-CVE-2022-30596
A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...
CVE-2022-30596
A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...
CVE-2022-30596
A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...
CVE-2022-30596: Improper Neutralization of Input During Web Page Generation
A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...
Facebook to Terminate some Location Tracking Services and Features
By Deeba Ahmed The social network giant plans the years most extensive bulk data deletion, including wiping out users location histories.… This is a post from HackRead.com Read the original post: Facebook to Terminate some Location Tracking Services and Features...