WordPress Duplicate Post Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Duplicate Post Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 80f37ad53409 Credits N/A Required privilege...

CVE-2023-3995

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is a duplicate of CVE-2023-4147...

UBUNTU-CVE-2023-3995

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is a duplicate of CVE-2023-4147...

CVE-2023-4026

Rejected reason: REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4024. Reason: This record is a duplicate of CVE-2023-4024. Notes: All CVE users should reference CVE-2023-4024 instead of this record. All references and descriptions in this record have been removed to prevent accidental...

tryMigrate() doesn't ensure that followerProfileId isn't already following

Lines of code Vulnerability details Bug Description In FollowNFT.sol, the tryMigrate function is used to migrate users who were following before the V2 upgrade. It does so by updating followTokenIdByFollowerProfileId and followDataByFollowTokenId, which are state variables introduced in the V2...

PT-2023-27350 · Undefined · Undefined

‼ CVE-2023-4026 ‼ REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4024. Reason: This record is a duplicate of CVE-2023-4024. Notes: All CVE users should reference CVE-2023-4024 instead of this record. All references and descriptions in this record have been removed to prevent accidental...

CVE-2023-39190

Rejected reason: CVE-2023-39190 was found to be a duplicate of CVE-2023-31436. Please see https://access.redhat.com/security/cve/CVE-2023-31436 for information about affected products and security errata...

CVE-2023-0958

Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handleinstallation function that is called via the inisevinstallation AJAX aciton in various versions. This makes it possible for authenticated attackers with...

CVE-2023-0958

Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handleinstallation function that is called via the inisevinstallation AJAX aciton in various versions. This makes it possible for authenticated attackers with...

CVE-2023-0958 Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function

Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handleinstallation function that is called via the inisevinstallation AJAX aciton in various versions. This makes it possible for authenticated attackers with...

WordPress Duplicate Post Plugin <= 1.3.9 is vulnerable to Broken Access Control

Software Duplicate Post Type Plugin Vulnerable versions = 1.3.9 Fixed in 1.4.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-0958 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c8c2c9580bd9 Credits WordFence Required privilege...

WordPress Duplicate Post Plugin <= 1.3.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Duplicate Post Type Plugin Vulnerable versions = 1.3.9 Fixed in 1.4.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-3977 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5afb6619a731 Credits WordFence Required...

PT-2023-33059 · Amazon · S2N-Quic

Name of the Vulnerable Software and Affected Versions: s2n-quic versions =v1.24.0 Description: The issue in s2n-quic causes the endpoint to shut down due to a combination of peer-initiated connection migration and duplicate new connection ID frames being received. No AWS services are affected, an...

WordPress Remove Duplicate Posts Plugin <= 1.3.5 is vulnerable to Broken Access Control

Software Remove Duplicate Posts Type Plugin Vulnerable versions = 1.3.5 Fixed in 1.3.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-29237 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 36a581916e0b Credits Junsu Yeo Requir...

GHSA-7RCM-W6FF-J43W Duplicate Advisory: Open Babel has uninitialized pointer dereference in PQS pFormat

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8qxc-57hf-hc9j. This link is maintained to preserve external references. Original Description A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and...

Duplicate Advisory: Open Babel has uninitialized pointer dereference in PQS pFormat

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8qxc-57hf-hc9j. This link is maintained to preserve external references. Original Description A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and...

Duplicate Advisory: Open Babel has uninitialized pointer dereference in GRO residue parser

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mw5r-wq2m-397c. This link is maintained to preserve external references. Original Description A use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open Babel 3.1.1 and maste...

Duplicate Advisory: Open Babel has out-of-bounds write in CSR PadString (title field)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p594-7xw4-g76p. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master comm...

GHSA-WJ42-V2P3-FQ2W Duplicate Advisory: Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5rff-8f7c-8jmw. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and...

Duplicate Advisory: Open Babel has out-of-bounds write in MOL2 attribute/value parser

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jr2x-6qf6-q5mc. This link is maintained to preserve external references. Original Description A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and mast...