WordPress WPC Grouped Product for WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin WPC Grouped Product for WooCommerce versions = 4.4.2...

WordPress WPC Grouped Product for WooCommerce Plugin <= 4.4.2 is vulnerable to Broken Access Control

Software WPC Grouped Product for WooCommerce Type Plugin Vulnerable versions = 4.4.2 Fixed in 4.4.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32520 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 18460ef99dba Credits Abdi...

[SECURITY] Fedora 40 Update: miglayout-5.0-4.fc40

MiGLayout is a versatile Swing layout manager. It uses String or API type-checked constraints to format the layout. MiGLayout can produce flowing, grid based, absolute with links, grouped and docking layouts. MiGLayout is created to be to manually coded layouts what Matisse/GroupLayout is to IDE...

Discourse Access Control Error Vulnerability

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features. Discourse suffers from an Access Control Error vulnerability that originates from allowing unauthorized attackers to view private content via the /polls/groupedpollresults...

Malicious Package

Overview grouped-content is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

Malicious code in grouped-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ae28aecabab8b02956866ca255b581224bf4be79e52c034e0721826a3e3d5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Denial of Service (DoS)

Overview fatfreecrm is a customer relationship management platform. Affected versions of this package are vulnerable to Denial of Service DoS in the findallgrouped function in models/polymorphic/task.rb, by users with bucket access. Details Denial of Service DoS describes a family of attacks, all...

The vulnerability of Google Chrome’s Chromium user interface allows a hacker to execute a write-off outside of memory.

The vulnerability of Google Chrome’s Chromium browser user interface relates to the ability to record bookmarks in groups. Exploiting this vulnerability allows a malicious actor to perform recording outside of memory...

Unspecified Vulnerability in GitLab (CNVD-2021-26101)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions after...

GitLab 安全漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions after...

April 14, 2015 update for Office 2010 (KB2965235)

April 14, 2015 update for Office 2010 KB2965235 This article describes update KB2965235 for Microsoft Office 2010 that was released on April 14, 2015. This update has a prerequisite. Improvements and Fixes Fixes the following issue:When you make some specific operation to a document in Word 2010,...