Age Gate < 2.17.1 - Unauthenticated Import Settings

The plugin patched an Unauthenticated Import Settings vulnerability. It was found to be exploited in the wild a few days after being patched...

VulnCheck KEV: CVE-2021-36901

Unauthenticated Stored Cross-Site Scripting XSS vulnerability in Phil Baker's Age Gate plugin = 2.17.0 at WordPress...

Verification check bypass in Gate One

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...

GHSA-Q6J2-G8QF-WVF7 Verification check bypass in Gate One

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...

CVE-2021-38178: Undefined Security Weakness

The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious...

CVE-2020-19003

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...

CVE-2020-19003

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...

PYSEC-2021-423

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...

PYSEC-2021-423

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...

Design/Logic Flaw

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...

CVE-2020-19003

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...

CVE-2020-19003

CVE-2020-19003 affects Gate One 1.2.0. The vulnerability allows bypassing the verification check done by the origins list, enabling a connection to Gate One instances used by hosts not on the origins list. Closely related advisories (GHSA, Red Hat, OSV, PYSEC) describe the same issue; no exploit ...

CVE-2020-19003

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...

PT-2021-10271 · Gate One · Gateone

Name of the Vulnerable Software and Affected Versions: Gate One version 1.2.0 Description: The issue allows attackers to bypass the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list. Recommendations: For Gate One version 1.2.0,...

WordPress Age Gate plugin <= 2.16.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Martin Vierula Trustwave in WordPress Age Gate plugin versions = 2.16.3. Solution Update the WordPress Age Gate plugin to the latest available version at least 2.16.4...

Age Gate < 2.16.4 - Authenticated Stored Cross-Site Scripting

The plugin does not sanitise and escape the 'Additional content' setting of its 'Messaging' page, which could allow users having access to such setting by default admin, but the plugin has a feature to change this and allow access to lower privileged users to perform Cross-Site Scripting attacks...

CVE-2020-19003: Authentication Bypass by Spoofing

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...

Gate One 授权问题漏洞

Gate One is an Html5 based terminal emulator and Ssh client. A security vulnerability exists in Gate One version 1.2.0, which stems from an issue in the software that allows an attacker to exploit the vulnerability to bypass authentication checks in the source list and connect to a Gate One...

Schneider Electric 多款产品授权问题漏洞

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug C-Bus installations on personal computers. An authorization issue vulnerability exists in several Schneider Electric products, which could allow remote code execution when a...

Schneider Electric C-Bus Toolkit Missing Authentication Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Schneider Electric C-Bus Toolkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...