WordPress plugin Zero Spam 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Extensions Component Information Disclosure

The vulnerability of the Extensions component of Microsoft Edge and Google Chrome lies in the improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information remotely...

Prompts Component Information Disclosure

The vulnerability of the Prompts component in Microsoft Edge and Google Chrome is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information remotely...

Google Chrome UI Replacement

The vulnerability of Google Chrome relates to improper security checks for standard elements. Exploiting this vulnerability allows a remote attacker to replace the user’s interface with a specially created HTML page...

RPyC Netref Code Execution

The vulnerability of the netref component in the RPyC Python library is related to improper security checks for standard elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

BIT-COUCHDB-2022-24706 Remote Code Execution Vulnerability in Packaging

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front o...

Microsoft Edge Google Chrome Site Isolation Unauthorized Access

The vulnerability of site isolation functions in Microsoft Edge and Google Chrome browsers is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

Google Chrome Navigation Disclosure Protected Information

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially created...

CVE-2023-31005 IBM Security Access Manager Container privilege escalation

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a local user to escalate their privileges due to an improper security configuration. IBM X-Force ID: 254767...

CVE-2023-31005 IBM Security Access Manager Container privilege escalation

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a local user to escalate their privileges due to an improper security configuration. IBM X-Force ID: 254767...

CVE-2023-31005: Improper Privilege Management

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a local user to escalate their privileges due to an improper security configuration. IBM X-Force ID: 254767...

Component Code Execution

The vulnerability of the Accessibility component in Microsoft Edge and Google Chrome is related to improper security checks for standard elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Downloads Component Information Disclosure

The vulnerability of the Downloads component in Microsoft Edge and Google Chrome is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

Autofill Data Compromise

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

CVE-2023-2585: Improperly Implemented Security Check for Standard

Keycloak's device authorization grant does not correctly validate the device code and client ID. An attacker client could abuse the missing validation to spoof a client consent request and trick an authorization admin into granting consent to a malicious OAuth client or possible unauthorized acce...

IBM MQ Appliance Security Vulnerability

The IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from International Business Machines IBM. A security vulnerability exists in IBM MQ Appliance version 9.3 that stems from improper security key authentication. An attacker exploited the...

CVE-2023-40445: Improperly Implemented Security Check for Standard

The issue was addressed with improved UI handling. This issue is fixed in iOS 17.1 and iPadOS 17.1. A device may persistently fail to lock...

Google Chrome Installer Bypass

The vulnerability of the Google Chrome browser’s Installer component is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...

Keycloak Unauthorized Access

The vulnerability of the Keycloak identity and access management software lies in improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Google Chrome Permission Prompt Confidential Information

The vulnerability of Google Chrome’s permission prompts is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential information through a specially created HTML page...