6768 matches found
CVE-2023-33101: Incorrect Type Conversion or Cast
Transient DOS while processing DL NAS TRANSPORT message with payload length 0...
[SECURITY] Fedora 40 Update: pandoc-cli-3.1.3-29.fc40
Pandoc-cli provides a command-line executable that uses the pandoc library to convert between markup formats...
CVE-2024-24711
Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11...
CVE-2024-24711 WordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability
Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11...
CVE-2024-24711
CVE-2024-24711 refers to a Missing Authorization vulnerability in the WordPress plugin WooCommerce Conversion Tracking (weDevs) affecting versions n/a–2.11. The issue arises from a missing capability check on the wcct_install_happy_addons function, allowing authenticated users (e.g., subscribers)...
CVE-2024-24711: Missing Authorization
Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11...
WordPress Plugin WooCommerce Conversion Tracking 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2024-20507 · Wedevs · Wedevs Woocommerce Conversion Tracking
Name of the Vulnerable Software and Affected Versions: weDevs WooCommerce Conversion Tracking versions n/a through 2.0.11 Description: The issue is related to a Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking. This vulnerability affects the specified versions of the...
Improper Input Validation
firefox is vulnerable to Improper Input Validation. The vulnerability is due to improper data handling leading to the creation of invalid Wasm values, potentially converting arbitrary integers into pointer values...
Skytrack - Planespotting And Aircraft OSINT Tool Made Using Python
About skytrack is a command-line based plane spotting and aircraft OSINT reconnaissance tool made using Python. It can gather aircraft information using various data sources, generate a PDF report for a specified aircraft, and convert between ICAO and Tail Number designations. Whether you are a...
CDeX 安全漏洞
CDeX is a free software package from CDeX Inc. for extracting digital audio from audio CDs and converting audio formats for Microsoft Windows. A security vulnerability exists in CDeX 5.7.1 and earlier versions that originated from allowing an attacker to conduct a brute force attack against a val...
PT-2024-26801
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the btrfs file system. The issue occurs when quota groups are enabled, and the error paths of certain operations do not...
CVE-2024-2606: Incorrect Type Conversion or Cast
Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox 124...
CVE-2024-1013 Unixodbc: out of bounds stack write due to pointer-to-integer types conversion
An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken...
fluent-bit:flb-it-fuzz-flb_json_fuzzer_OSSFUZZ: Heap-buffer-overflow in msgpack2json
Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4787867169652736 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-flbjsonfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow...
CVE-2024-0828
The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers...
CVE-2024-0828 Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Missing Authorization
The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers...
CVE-2024-0828 Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Missing Authorization
The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers...
CVE-2024-26162: Incorrect Conversion between Numeric Types
Microsoft ODBC Driver Remote Code Execution Vulnerability...
Linux kernel security vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the fact that scrub causes an irreparable failure when ext4 is converted to btrfs...