1820 matches found
CVE-2023-27349
CVE-2023-27349 affects the BlueZ Bluetooth stack (Audio Profile AVRCP) and is due to improper validation of array indexes in the AVRCP handling path, causing a write past the end of an allocated buffer. The issue enables network-adjacent attackers to execute code with root privileges on vulnerabl...
CVE-2024-1657
CVE-2024-1657 : A flaw in Red Hat Ansible Automation Platform involves an insecure WebSocket used when interacting with the EDA server during installation from the Ansible rulebook. An attacker with access to any machine in the CIDR block could download all rulebook data, impacting confidentialit...
CVE-2023-52220
CVE-2023-52220 is a Missing Authorization/Broken Access Control vulnerability in the WordPress plugin Google Analytics by Monster Insights (versions
CVE-2023-51482
CVE-2023-51482 is an Improper Authentication vulnerability in WordPress Eazy Plugin Manager (affected: versions n/a through 4.1.2). The flaw allows accessing functionality not properly constrained by ACLs, with references explicitly noting an Arbitrary Options Update leading to Remote Code Execut...
CVE-2023-51478
CVE-2023-51478 (Build App Online) is substantiated by connected PT-secure sources: an improper authentication flaw allows unauthenticated privilege escalation leading to potential account takeover in Build App Online versions 1.0.19 and earlier. The affected software is Build App Online; exploita...
CVE-2023-6237
The CVE-2023-6237 entry concerns OpenSSL EVP_PKEY_public_check() performing an expensive verification on RSA public keys. The issue causes long delays (potential DoS) when keys of untrusted provenance are checked, notably when using the OpenSSL pkey tool with -pubin/-check. The impact is describe...
CVE-2023-20249
CVE-2023-20249 affects Cisco TelePresence Management Suite (TMS) web-based management interface. Affected component: the TMS web UI; root cause: insufficient input validation in the interface allows an authenticated, remote attacker to perform cross-site scripting (XSS). Impact: attacker can exec...
CVE-2024-20313
CVE-2024-20313 affects Cisco IOS XE Software, specifically the OSPFv2 feature. The issue arises from improper validation of OSPF updates, allowing an unauthenticated, adjacent attacker to send a malformed OSPF update that can cause the device to reload and trigger a DoS. Connected sources corrobo...
CVE-2023-51472
CVE-2023-51472: Checkout Mestres WP plugin for WordPress (versions 7.1.9.7 (per PT-Security) or follow vendor/NVD advisories for the latest patched version.
CVE-2023-51471
CVE-2023-51471 : Affects the WordPress plugin Checkout Mestres WP (Mestres WP) up to version 7.1.9.7. Root cause: Improp er Authentication leading to an Unauthenticated Arbitrary Options Update vulnerability. Impact and exploitation details are not fully disclosed in the provided documents; the C...
CVE-2023-51425
CVE-2023-51425 affects the Rencontre – Dating Site WordPress plugin (
CVE-2023-51405
CVE-2023-51405 concerns the WordPress plugin BookingPress prior to version 1.0.75, where unauthenticated users could manipulate the booking price due to an improper validation in the bookingpress_confirm_booking flow. Affected versions are BookingPress up to 1.0.74; the vulnerability enables pric...
CVE-2023-48763
CVE-2023-48763 – JetFormBuilder Content Injection : An unauthenticated attacker can inject content via improper neutralization of script-related HTML tags in JetFormBuilder. Affected: WordPress JetFormBuilder versions up to 3.1.4. Root cause: content injection vulnerability (XSS-like) in dynamic ...
CVE-2023-25790
CVE-2023-25790 affects xtemos WoodMart (WordPress theme) and is described as an unauthenticated Cross-Site Scripting/shortcode injection vulnerability in WoodMart up to versions 7.0.4 (and 7.0.4 and earlier in some entries). The issue is caused by improper authentication and input handling that a...
CVE-2022-45852
CVE-2022-45852 is a path traversal vulnerability in the WordPress WP-FormAssembly plugin affecting versions n/a through 2.0.5. It arises from improper limitation of a pathname to a restricted directory, allowing traversal to sensitive files. Documented impacts include (per sources) potential unau...
CVE-2023-50885
CVE-2023-50885 affects Store Locator WordPress (AGILESTORE LOCATOR) plugin for WordPress, with versions up to 1.4.14. It is an improper limitation of a pathname to a restricted directory (path traversal) vulnerability that can enable arbitrary file deletion. Red Hat and other sources corroborate ...
CVE-2023-47843
CVE-2023-47843 : WordPress Plugin CataBlog
CVE-2023-4235
CVE-2023-4235 — ofono SMS decoding stack overflow Affected software: ofono (Open Source Telephony stack on Linux). Vulnerability: A stack-based buffer overflow occurs in the decode_deliver_report() path used for SMS decoding. The issue stems from a missing bound check for the memcpy length in dec...
CVE-2023-4234
CVE-2023-4234 affects ofono (Open Source Telephony on Linux). The vulnerability is a stack-based buffer overflow triggered in decode_submit_report() during SMS decoding, with a bound check missing for the memcpy length in that function. Attack surface is plausible from a compromised modem, malici...