GHSA-QJFX-FVX7-3WVW Business Logic Errors in microweber/microweber

A vulnerability has been identified in microweber where users can purchase items with a coupon code. If the admin disables the use of the coupon code functionality, but the user sends requests to the API that handles the coupon code, the user can exploit the vulnerability and obtain items at a...

CVE-2023-6832

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6832

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

Code injection

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6832

CVE-2023-6832 affects microweber/microweber prior to 2.0. A business logic flaw enables bypass of coupon code validation, allowing attackers to obtain items at reduced prices when the coupon feature is disabled. Public sources (GHSA and Veracode advisories) describe the coupon-validation bypass a...

CVE-2023-6832 Business Logic Errors in microweber/microweber

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6832 Business Logic Errors in microweber/microweber

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

Microweber Business Logic Errors

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.0. Unpublished and deleted products can be added to checkout...

CVE-2023-6566

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6566

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

Code injection

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6566

CVE-2023-6566 describes business logic errors in microweber/microweber prior to 2.0. The root cause, as reflected in multiple sources, is a flaw in the CartManager.php get function that fails to verify whether items are unpublished or deleted before checkout. Affected product: microweber/microweb...

Rocky Linux 8 : curl (RLSA-2021:3582)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:3582 advisory. - When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The...

CVE-2023-3914 Incorrect User Management in GitLab

A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects...

CVE-2023-3914 Incorrect User Management in GitLab

A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects...

SUSE SLES12 Security Update : libxml2 (SUSE-SU-2023:3665-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3665-1 advisory. - Possible cross-site scripting vulnerability in libxml after commit 960f0e2. CVE-2016-3709 - In libxml2 before 2.10.4, parsing of...

Business Logic Errors

vyper is vulnerable to Business Logic Errors. The vulnerability exists because the order of evaluation of the arguments of the builtin functions uint256addmod, uint256mulmod, ecadd and ecmul does not follow source order, which can be exploited by an attacker to create contracts that behave...

Business Logic Errors

froxlor/froxlor is vulnerable to Business Logic Errors. The vulnerability exists in the update function pf Admins.php because the admin name is not properly validated for spaces which allows an attacker to save a user name with just spaces/...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from the American company Google. Google Android suffers from a security vulnerability that stems from the existence of logic errors in the code at multiple locations, with a possible way to mask the microphone privacy indicator...

Froxlor vulnerable to business logic errors

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22...