CVE-2024-41518: Improper Access Control

An Incorrect Access Control vulnerability in "/admin/programm/ /export/statistics" in Feripro = v2.2.3 allows remote attackers to export an XLSX file with information about registrations and participants...

Mercodia Feripro security vulnerabilities

Mercodia Feripro is a vacation management software from Mercodia USA. A security vulnerability exists in Mercodia Feripro 2.2.3 and earlier versions, which stems from an incorrect access control vulnerability in /admin/programm//export/statistics, which could allow a remote attacker to export an...

May 23, 2019—KB4499184 (Preview of Monthly Rollup)

May 23, 2019—KB4499184 Preview of Monthly Rollup Applies To Windows Server 2008 Service Pack 2 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4499149 released May 14, 2019 and also includes these new quality improvements as a preview of the...

May 23, 2019—KB4499182 (Preview of Monthly Rollup)

May 23, 2019—KB4499182 Preview of Monthly Rollup Applies To Windows 8.1 Windows Server 2012 R2 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4499151 released May 14, 2019 and also includes these new quality improvements as a preview of the...

June 21, 2018—KB4284863 (Preview of Monthly Rollup)

June 21, 2018—KB4284863 Preview of Monthly Rollup Applies To Windows 8.1 Windows Server 2012 R2 Improvements and fixes This nonsecurity update includes improvements and fixes that were a part of KB 4284815 released June 12, 2018 and also includes these new quality improvements as a preview of the...

PT-2024-29436 · Feripro · Feripro

Name of the Vulnerable Software and Affected Versions: Feripro versions prior to 2.2.3 Description: The issue concerns an Incorrect Access Control vulnerability. It affects the "/admin/programm//export/statistics" endpoint, allowing remote attackers to export an XLSX file containing information...

CVE-2024-5331

The Breakdance plugin for WordPress is vulnerable to unauthorized access of data in all versions up to, and including, 1.7.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to export form submissions...

CVE-2024-5331

The Breakdance plugin for WordPress is vulnerable to unauthorized access of data in all versions up to, and including, 1.7.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to export form submissions...

CVE-2024-5331: Improper Access Control

The Breakdance plugin for WordPress is vulnerable to unauthorized access of data in all versions up to, and including, 1.7.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to export form submissions...

PT-2024-35721 · WordPress · Breakdance

Name of the Vulnerable Software and Affected Versions: Breakdance plugin for WordPress versions up to, and including, 1.7.2 Description: The issue allows authenticated attackers with Contributor-level access and above to export form submissions, resulting in unauthorized access of data...

WordPress plugin Breakdance has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-7156

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822B20200513 and classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/ExportSettings.sh of the component apmib Configuration Handler. The manipulation leads to information disclosure. The attack m...

PT-2024-38118 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.5822 B20200513 Description: A vulnerability was found in the apmib Configuration Handler component, specifically affecting some unknown functionality of the file /cgi-bin/ExportSettings.sh. This issue leads to...

CVE-2024-1798 Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_lp_export_xml

The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the tutorlpexportxml function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to export courses, including privat...

CVE-2024-1798

CVE-2024-1798 affects the WordPress plugin “Tutor LMS – Migration Tool” and concerns unauthenticated data export due to a missing capability check in tutor_lp_export_xml. Affected versions are up to and including 2.2.0. Public sources indicate this could allow unauthenticated attackers to export ...

CVE-2024-1798: Missing Authorization

The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the tutorlpexportxml function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to export courses, including privat...

PT-2024-18316 · WordPress · The Tutor Lms – Migration Tool

Name of the Vulnerable Software and Affected Versions: The Tutor LMS – Migration Tool plugin for WordPress versions up to, and including, 2.2.0 Description: The issue allows unauthorized access to data due to a missing capability check on the tutor lp export xml function. This makes it possible f...

Solar-Log 1000 security vulnerabilities

Solar-Log 1000 is a solar photovoltaic data logger from the German company Solar-Log. A security vulnerability exists in Solar-Log 1000 versions prior to v2.8.2 and 52-23.04.2013, which originates from storing plaintext passwords in the export.html, email.html and sms.html files...

PT-2024-28786 · Sl 500 +2 · Sl 500 +2

Name of the Vulnerable Software and Affected Versions: Solar-Log 1000 versions prior to 2.8.2 and build 52-23.04.2013 SL 200 versions prior to 3.0.0-60 SL 500 versions prior to 3.0.0-60 Description: The issue concerns the storage of plaintext passwords in certain files, specifically export.html,...

CVE-2024-7060

CVE-2024-7060 is an information disclosure vulnerability in GitLab CE/EE related to project/group exports. Affected versions include 15.4 up to 17.0.5, 17.1 up to 17.1.3, and 17.2 up to 17.2.1, where unauthorized users could view the resulting export. The issue is rooted in the export mechanism a...