12548 matches found
MAL-2024-9610 Malicious code in export-gltf (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-46212: Improper Limitation of a Pathname to a Restricted Directory
An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...
CVE-2017-20194: Exposure of Sensitive Information to an Unauthorized Actor
The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frmformspreview AJAX action. This makes it possible for unauthenticated attackers to export all of the form entries for a given form...
PT-2024-39583
Name of the Vulnerable Software and Affected Versions The Ultimate WordPress Toolkit – WP Extended plugin for WordPress versions up to, and including, 3.0.9 Description The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows...
PT-2024-10603 · WordPress · Formidable Form Builder
Name of the Vulnerable Software and Affected Versions: Formidable Form Builder plugin for WordPress versions up to, and including, 2.05.03 Description: The issue allows unauthenticated attackers to export all form entries for a given form via the frm forms preview AJAX action. This enables the...
CVE-2024-46212
An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...
PT-2024-31922 · Unknown · Redaxo Cms
Name of the Vulnerable Software and Affected Versions: REDAXO CMS version 5.17.1 Description: An issue in the component "/index.php?page=backup/export" of REDAXO CMS allows attackers to execute a directory traversal. Recommendations: For REDAXO CMS version 5.17.1, as a temporary workaround,...
CVE-2024-46212
An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...
CVE-2024-45734
In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by using the PDF export feature in Splunk classic dashboards. The images on the machine could be exposed...
CVE-2024-45734
In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by using the PDF export feature in Splunk classic dashboards. The images on the machine could be exposed...
CVE-2024-45734 Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard
In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by using the PDF export feature in Splunk classic dashboards. The images on the machine could be exposed...
CVE-2024-45734 Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard
In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by using the PDF export feature in Splunk classic dashboards. The images on the machine could be exposed...
CVE-2024-45734
CVE-2024-45734 affects Splunk Enterprise 9.1.6, 9.2.3, and 9.3.0. A low-privileged user without admin/power roles could view images on the host by exporting a Splunk classic dashboard to PDF and using a local image path in an img tag within the dashboard XML. Impact is exposure of local host imag...
WordPress SV Product Import Export for WooCommerce plugin <= 1.0.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Hakiduck Patchstack Alliance in WordPress Plugin CSV Product Import Export for WooCommerce versions = 1.0.0...
CVE-2024-45734: Improper Access Control
In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by using the PDF export feature in Splunk classic dashboards. The images on the machine could be exposed...
Splunk Enterprise 9.1.0 < 9.1.6, 9.2.0 < 9.2.3 (SVD-2024-1004)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2024-1004 advisory. - In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the admin or power Splunk rol...
Splunk Enterprise security vulnerabilities
Splunk Enterprise is a suite of data collection and analytics software from Splunk, Inc. in the United States. A security vulnerability exists in Splunk Enterprise versions 9.2.x prior to 9.2.3 and 9.1.x prior to 9.1.6, which stems from a low-privileged user being able to view an image on a...
CVE-2024-7514
The WordPress Comments Import & Export plugin for WordPress is vulnerable to to arbitrary file read due to insufficient file path validation during the comments import process, in versions up to, and including, 2.3.7. This makes it possible for authenticated attackers, with Author-level access an...
