CVE-2020-36730 CMP <= 3.8.1 - Missing Authorization

The CMP for WordPress is vulnerable to authorization bypass due to a missing capability check on the cmpgetpostdetail, niteoexportcsv, and cmpdisablecomingsoonajax functions in versions up to, and including, 3.8.1. This makes it possible for unauthenticated attackers to read posts, export...

CVE-2023-3126

The B2BKing plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'b2bkingdownloadpricelist' function in versions up to, and including, 4.6.00. This makes it possible for Authenticated attackers with subscriber or customer-level permissions to...

The vulnerability of the PnPSCADA automation system’s software lies in the lack of protective measures for SQL query structures. This allows attackers to gain unauthorized access to protected information and compromise the system.

The vulnerability of the PnPSCADA automation system’s software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and compromise the system...

The vulnerability of the CN2600 terminal server’s microprogramming software, related to the use of cryptographic algorithms containing defects, allows a hacker to compromise the connection and gain access to protected information.

The vulnerability of the microprogramming software of the terminal server CN2600 is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow a malicious actor to compromise the connection and gain access to protected information...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s DDL functions allow attackers to gain unauthorized access to protected information.

Vulnerability of the Server component: The DDL system for managing databases, Oracle MySQL Server, has vulnerabilities related to insufficient protection of operational data. Exploiting these vulnerabilities can allow unauthorized attackers to gain unauthorized access to protected information usi...

WordPress plugin B2BKing 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

Vulnerabilities fixed in Google Chrome

Google has fixed two vulnerabilities in Chrome. Of one vulnerability no substantive information or CVE attribute has been disclosed stated. The vulnerability with attribute CVE-2023-3079 allows a malicious person to remotely capable of executing arbitrary code in the scope of the browser,...

Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition

GitLab has fixed vulnerabilities in GitLab Enterprise Edition EE and Community Edition CE. A malicious party could vulnerabilities to exploit attacks that can result in the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS. Manipulation of data Circumvention of...

CVE-2023-29724

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with...

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint (CE) device, related to deficiencies in access control to the version-controlled repository, allows a perpetrator to gain read, modify, or delete access to data.

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint device is related to deficiencies in access control to the version-controlled repository. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

The vulnerability of the Student Console component in the Faronics Insight computer network management platform allows a hacker to gain access to read, modify, or delete data.

The vulnerability of the Student Console component in the Faronics Insight computer network management platform involves bypassing the authentication process by using an alternative path or channel when handling endpoints. Exploiting this vulnerability allows a malicious actor to gain read, modif...

CVE-2023-2545

The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getListOfUsers' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2023-2545

CVE-2023-2545 : The Feather Login Page plugin for WordPress (versions 1.0.7–1.1.1) has two concrete flaws. First, a missing capability check on the getListOfUsers function allows authenticated users with subscriber-level permissions and above to access login links, enabling potential privilege es...

WordPress Plugin Feather Login Page 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

The vulnerability of the Guest View mode in browsers Google Chrome and Microsoft Edge allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Guest View mode in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information through a specially created...

Loka Digital Media SoLive 安全漏洞

Loka Digital Media SoLive is a social platform from Loka Digital Media, Inc. A security vulnerability exists in Loka Digital Media SoLive versions 1.6.14 through 1.6.20 that originates from an attacker being able to modify data in any SharedPreference file that is loaded into memory when the...

The vulnerability of the built-in software of the ARIS controller, related to the use of cryptographic algorithms that contain defects and risks, allows a perpetrator to gain access to critical information.

The vulnerability of the built-in software of the ARIS controller is related to the use of cryptographic algorithms that contain defects and risks. Exploiting this vulnerability could allow a malicious actor to gain access to critical information...

CVE-2023-24605

OX App Suite before backend 7.10.6-rev37 does not enforce 2FA for all endpoints, e.g., reading from a drive, reading contact data, and renaming tokens...

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System (IGSS), related to deficiencies in path name restriction, allows a intruder to access confidential data.

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, is related to deficiencies in name-based path restrictions. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

The vulnerability of the RequestInfoByXml function in the software interface of the API platform for collaborative work and automation of documentation processing in Weaver e-cology allows a malicious actor to gain access to read, modify, or delete data.

The vulnerability of the RequestInfoByXml function in the software interface of the API for collaborative work and automation of documentation processing in the Weaver e-cology platform is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could all...