The vulnerability of the Veeam Agent for Microsoft Windows data backup tool lies in the use of an unreliable search path, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Veeam Agent for Microsoft Windows data backup tool is related to the use of an unreliable search path. Exploiting this vulnerability allows attackers to execute arbitrary code by introducing malicious DLL libraries...

WordPress Dynamic Product Category Grid, Slider for WooCommerce plugin <= 1.1.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Dynamic Product Category Grid, Slider for WooCommerce versions = 1.1.3...

WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Contact Form 7 - Dynamic Text Extension plugin = 5.0.1 - Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Contact Form 7 – Dynamic Text Extension versions = 5.0.1...

RLSA-2024:10979 Moderate: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: Red Hat Security Advisory: python36:3.6 security update

An update for the python36:3.6 module is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code or cause system failures.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system failures...

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models allows attackers to execute arbitrary code. This vulnerability stems from buffer overflows in the dynamic memory, enabling attackers to exploit the system.

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models is related to a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in buffer overflows in the stack, which allows attackers to trigger a service failure.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models allows attackers to execute arbitrary code. This vulnerability stems from buffer overflows in the dynamic memory, enabling attackers to exploit the system.

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models is related to a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2023-35046

Missing Authorization vulnerability in Dynamic.ooo Dynamic Visibility for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamic Visibility for Elementor: from n/a through 5.0.5...

CVE-2023-35046

Missing Authorization vulnerability in Dynamic.ooo Dynamic Visibility for Elementor dynamic-visibility-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamic Visibility for Elementor: from n/a through = 5.0.5...

CVE-2023-35046 WordPress Dynamic Visibility for Elementor plugin <= 5.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dynamic.ooo Dynamic Visibility for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamic Visibility for Elementor: from n/a through 5.0.5...

CVE-2023-35046

CVE-2023-35046 concerns the WordPress plugin Dynamic Visibility for Elementor . Affected: Dynamic Visibility for Elementor versions up to 5.0.5. Issue: Missing Authorization / broken access control due to incorrectly configured access control security levels. Impact: per sources, this results in ...

CVE-2023-35046 WordPress Dynamic Visibility for Elementor plugin <= 5.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dynamic.ooo Dynamic Visibility for Elementor dynamic-visibility-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamic Visibility for Elementor: from n/a through = 5.0.5...

WordPress plugin Dynamic Visibility for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

The vulnerability of the Veritas NetBackup software for backup and data restoration operations, related to an uncontrolled search path element, allows attackers to escalate their privileges and execute arbitrary commands.

The vulnerability of the Veritas NetBackup backup and recovery software relates to an uncontrolled element of the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands by loading malicious DLL libraries...

PT-2024-12495 · Elementor · Dynamic Visibility For Elementor

Name of the Vulnerable Software and Affected Versions: Dynamic Visibility for Elementor versions through 5.0.5 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

CVE-2024-54114

Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability...

SUSE CVE-2024-54131

The Kolide Agent aka: Launcher is the lightweight agent designed to work with Kolide's service. An implementation bug in the Kolide Agent known as launcher allows for local privilege escalation to the SYSTEM user on Windows 10 and 11. The bug was introduced in version 1.5.3 when launcher started...

The vulnerability of the Drupal CMS system’s kernel lies in the insufficient control over the modification of dynamically defined object properties, allowing attackers to execute arbitrary code.

The vulnerability of the Drupal CMS system’s kernel is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...