3997 matches found
CVE-2024-49651
CVE-2024-49651 is a reflected Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin WooCommerce Maintenance Mode (Free) affecting versions up to 2.0.1. The issue arises from improper input neutralization during web page generation, enabling Reflected XSS. Public references (NVD, Red Ha...
PT-2024-33603 · Woocommerce · Woocommerce Maintenance Mode
Name of the Vulnerable Software and Affected Versions: WooCommerce Maintenance Mode versions prior to 2.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...
WordPress plugin WooCommerce Maintenance Mode 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
The vulnerability of Intel’s microprogrammed chipset and processor software, related to integer overflow, allows attackers to trigger malfunctions during maintenance operations.
The vulnerability of Intel chipset and processor microprogramming software is related to integer overflow. Exploiting this vulnerability can allow a remote attacker to cause system failures...
CVE-2024-47690 f2fs: get rid of online repaire on corrupted directory
In the Linux kernel, the following vulnerability has been resolved: f2fs: get rid of online repaire on corrupted directory syzbot reports a f2fs bug as below: kernel BUG at fs/f2fs/inode.c:896! RIP: 0010:f2fsevictinode+0x1598/0x15c0 fs/f2fs/inode.c:896 Call Trace: evict+0x532/0x950 fs/inode.c:704...
WordPress WooCommerce Maintenance Mode plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WooCommerce Maintenance Mode versions = 2.0.1...
WordPress WooCommerce Maintenance Mode Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)
Software WooCommerce Maintenance Mode Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49651 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2eff34a69714 Credits Mika Required privile...
Security Bulletin: The IBM® Engineering Lifecycle Management is impacted by vulnerabilties in Apache Commons Collections
Summary Multiple vulnerabilities have been identified in Apache Commons Collections, which is used in IBM Engineering Lifecycle Management - IBM Jazz. This bulletin contains information regarding vulnerabilities and remediation actions. Vulnerability Details CVEID:CVE-2017-15708 DESCRIPTION: Apac...
CVE-2024-48822
Privilege escalation in Automatic Systems Maintenance SlimLane 29565d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to escalate privileges via the FtpConfig.php page...
CVE-2024-48824
An issue in Automatic Systems Maintenance SlimLane 29565d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to obtain sensitive information via the Racine & FileName parameters in the download-file.php component...
CVE-2024-48821
Cross Site Scripting vulnerability in Automatic Systems Maintenance SlimLane 29565d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to escalate privileges via the FtpConfig.php component...
CVE-2024-48823
Local file inclusion in Automatic Systems Maintenance SlimLane 29565d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to escalate privileges via the PassageAutoServer.php page...
CVE-2024-45737
In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the "admin" or "power" Splunk roles could change the maintenance mode state of App Key Value Store KVStore through a...
CVE-2024-45737
In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the "admin" or "power" Splunk roles could change the maintenance mode state of App Key Value Store KVStore through a...
CVE-2024-45737
CVE-2024-45737 affects Splunk Enterprise versions prior to 9.3.1, 9.2.3, and 9.1.6, and Splunk Cloud Platform prior to 9.2.2403.108 (and 9.1.2312.204). A low-privileged user without admin/power roles can change the maintenance mode state of KVStore via CSRF. The CVE is documented across multiple ...
CVE-2024-45737 Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)
In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the "admin" or "power" Splunk roles could change the maintenance mode state of App Key Value Store KVStore through a...
CVE-2024-45737 Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)
In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the "admin" or "power" Splunk roles could change the maintenance mode state of App Key Value Store KVStore through a...
CVE-2024-48823
Local file inclusion in Automatic Systems Maintenance SlimLane 29565d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to escalate privileges via the PassageAutoServer.php page...
CVE-2024-48824
An issue in Automatic Systems Maintenance SlimLane 29565d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to obtain sensitive information via the Racine & FileName parameters in the download-file.php component...