WordPress BasePress Docs plugin <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update vulnerability

Missing Authorization to Authenticated Subscriber+ Database Update vulnerability discovered by BrokenAC ignore in WordPress Plugin Knowledge Base documentation & wiki plugin – BasePress versions = 2.16.3.3...

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20241104T154416 2024-11-04T15:44:16Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2024-3233 CVE-2024-46872 GHSA-762g-9p7f-mrww GO-2024-3234 CVE-2024-47401 GHSA-762v-rq7q-ff9...

SportsNET SQL Injection Vulnerability (CNVD-2024-37600)

SportsNET is a sports event network application from SportsNET, Inc. SportsNET suffers from a SQL injection vulnerability that can be exploited by an attacker to retrieve, update, and delete all information in the database via a specially crafted SQL query...

SUSE: Security Advisory (SUSE-SU-2024:0523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fortinet Fortigate Firewall deny policy bypass (FG-IR-23-432)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-432 advisory. - An improper access control vulnerability CWE-284 in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 and bel...

CVE-2023-47536

An improper access control vulnerability CWE-284 in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below may allow a remote unauthenticated attacker to bypass the firewall deny...

CVE-2023-47536

An improper access control vulnerability CWE-284 in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below may allow a remote unauthenticated attacker to bypass the firewall deny...

PT-2023-7704 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.2.0, 7.0.13 and below, 6.4.14 and below FortiProxy versions 7.2.3 and below, 7.0.9 and below, 2.0.12 and below Description: The issue is related to improper access control, which may allow a remote unauthenticated attacker ...

Social Pug < 1.30.1 - Missing Authorization via multiple admin_init actions

Description The plugin is vulnerable to unauthorized modification of data due to a missing capability check on multiple functions that run on admininit, allowing unauthenticated attackers to update the database...

Debian dla-3639 : distro-info-data - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3639 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3639-1 [email protected] https://www.debian.org/lts/security/...

DLA-3639-1 distro-info-data - database update

Bulletin has no description...

Design/Logic Flaw

Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cache of user sessions. Upon a cache-miss,...

PT-2023-8436

Name of the Vulnerable Software and Affected Versions Shim versions prior to 15.8 Description A remote code execution vulnerability was found in Shim, a core component of secure boot in Linux. The vulnerability allows an attacker to craft a specific malicious HTTP request, leading to a completely...

CLSA-2023-1688068314 mysql: Fix of 37 CVEs

Update to MySQL 8.0.32 - CVEs fixed: CVE-2023-21912 CVE-2022-21594 CVE-2022-21599 CVE-2022-21604 CVE-2022-21608 CVE-2022-21611 CVE-2022-21617 CVE-2022-21625 CVE-2022-21632 CVE-2022-21633 CVE-2022-21637 CVE-2022-21640 CVE-2022-39400 CVE-2022-39408 CVE-2022-39410 CVE-2023-21836 CVE-2023-21863...

[SECURITY] [DLA 3411-1] distro-info-data database update

Debian LTS Advisory DLA-3411-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera April 30, 2023 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.41+deb10u7 This is a routine update of the distro-info-data database for Debian LTS users. It includes t...

File (Field) Paths - Moderately critical - Access bypass - SA-CONTRIB-2022-065

The File Field Paths module extends the default functionality of Drupal's core File module, by adding the ability to use entity-based tokens in destination paths and file names. The module's default configuration could temporarily expose private files to anonymous visitors. Important note: to fix...

[SECURITY] [DLA 3171-1] distro-info-data database update

Debian LTS Advisory DLA-3171-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 30, 2022 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.41+deb10u6 This is a routine update of the distro-info-data database for Debian LTS users. It includes...

Debian dla-3171 : distro-info-data - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3171 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3171-1 [email protected] https://www.debian.org/lts/security/...

DLA-3171-1 distro-info-data - database update

Bulletin has no description...

The vulnerability of the database update function in the web-filtering microprogramming software for Cisco Small Business RV160, RV260, RV340, and RV345 lies in errors during the processing of input data, allowing an attacker to execute arbitrary code with root privileges.

The vulnerability of the database update function in Cisco Small Business RV160, RV260, RV340, and RV345 router microprogramming systems lies in errors in processing input data. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges remotely...