CVE-2024-10390

The Elfsight Telegram Chat CC plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the 'updatePreferences' function in all versions up to, and including, 1.1.0. This makes it possible for authenticated attackers, with subscriber-level access and...

CVE-2024-10390 Elfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

The Elfsight Telegram Chat CC plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the 'updatePreferences' function in all versions up to, and including, 1.1.0. This makes it possible for authenticated attackers, with subscriber-level access and...

WordPress Elfsight Telegram Chat CC plugin <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Missing Authorization to Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by István Márton in WordPress Plugin Elfsight Telegram Chat CC versions = 1.1.0...

WordPress plugin Elfsight Telegram Chat CC 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin...

PT-2024-16240 · Elfsight · Elfsight Telegram Chat Cc

Name of the Vulnerable Software and Affected Versions: Elfsight Telegram Chat CC plugin for WordPress versions up to, and including, 1.1.0 Description: The issue is related to a missing capability check on the updatePreferences function, allowing authenticated attackers with subscriber-level acce...

DEBIAN-CVE-2024-49393

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality...

Mutt 安全漏洞

Mutt is a text-based e-mail client for Unix-like systems developed by Michael Elkins. A security vulnerability exists in Mutt, which stems from the To and Cc e-mail headers not being verified by cryptographic signatures, thereby compromising the confidentiality of the e-mail...

CVE-2024-10469 CERT/CC VINCE versions before 3.0.9 allows authenticated user to access User Management view.

VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users...

The vulnerability of Microprogrammed Software in Synology cameras such as BC500, TC500, and CC400W arises from access control errors, allowing attackers to execute arbitrary code.

The vulnerability of the microprogramming software of Synology BC500, Synology TC500, and Synology CC400W is related to access control errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2024-21264

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Activity Guide Composer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Zendesk 安全漏洞

Zendesk is a complete customer service solution from Zendesk USA. A security vulnerability exists in versions of Zendesk prior to 2024-07-02, which stems from insufficient processing of emails in a way that extracts the cc field from incoming email messages to grant additional ticket viewing...

CVE-2024-41515

A reflected cross-site scripting XSS vulnerability in "ccHandlerResource.ashx" in CADClick = 1.11.0 allows remote attackers to inject arbitrary web script or HTML via the "resurl" parameter...

The vulnerability of the `mc_chroma` function in the `motion.cc` component of the h.265 Libde265 video codec implementation, related to writing beyond buffer boundaries, allows a hacker to cause a service failure.

The vulnerability of the mcchroma function in the motion.cc component of the H.265 Libde265 video codec implementation is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created video file...

CVE-2024-39771

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack...

PT-2024-28667 · Qbic · Qbic Cloud Cc-2L

Name of the Vulnerable Software and Affected Versions: QBiC CLOUD CC-2L versions 1.1.30 and earlier Safie One versions 1.8.2 and earlier Description: The issue is related to improper certificate validation, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter...

JVN#83440451: Multiple Safie products vulnerable to improper server certificate verification

Multiple Safie products are vulnerable to improper server certificate verification CWE-295. The product can be operated via port 11029/TCP and Bluetooth, and its communications are AES encrypted. The product user can obtain the encryption key from the cloud server based on the device-specific...

CVE-2024-34133 Adobe Illustrator CC 2023 v27.9 Vulnerability I

Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

DEBIAN-CVE-2024-40944

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to ccplatformhas triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by loadsegments and GSBASE is now 0 but call depth...

MAL-2024-7672 Malicious code in sap-cc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd5a22d29e3017a53adb018ed1518d534d9b88f32d674f003fbacda66fd17636 The OpenSSF Package Analysis project identified 'sap-cc' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in sap-cc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd5a22d29e3017a53adb018ed1518d534d9b88f32d674f003fbacda66fd17636 The OpenSSF Package Analysis project identified 'sap-cc' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicate...