WordPress GiveWP Plugin <= 3.13.0 is vulnerable to Broken Access Control

Software GiveWP Type Plugin Vulnerable versions = 3.13.0 Fixed in 3.14.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5940 Patch priority Medium CVSS severity Medium 6.5 Developer Liquid Web / StellarWP PSID c733c510d1d3 Credits villu164 Required...

BIT-PYTHON-2024-6923 Email header injection due to unquoted newlines

There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized...

WordPress Skitter Slideshow Plugin <= 2.5.2 is vulnerable to Server Side Request Forgery (SSRF)

Software Skitter Slideshow Type Plugin Vulnerable versions = 2.5.2 Fixed in N/A OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2022-1751 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID 248ddea6bcba Credits Bartu Utku SARP Required...

WordPress White Label CMS Plugin <= 2.7.4 is vulnerable to Cross Site Scripting (XSS)

Software White Label CMS Type Plugin Vulnerable versions = 2.7.4 Fixed in 2.7.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43303 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c731ad649acb Credits Rafie Muhammad Patchstack Requir...

WordPress WP MultiTasking Plugin <= 0.1.12 is vulnerable to Cross Site Scripting (XSS)

Software WP MultiTasking Type Plugin Vulnerable versions = 0.1.12 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6859 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5ed370bec785 Credits Bob Matyas Required...

Intel VTune Profiler Software Advisory - Lenovo Support US

No description provided...

Intel ISH Software Installer Advisory - Lenovo Support US

No description provided...

Intel EMON Software Advisory - Lenovo Support US

No description provided...

Intel VROC Software Advisory - Lenovo Support US

No description provided...

AMD Uninitialized GPU Register Access Advisory - Lenovo Support US

No description provided...

Out of Bounds Read in Arm® Trusted Firmware

Bulletin ID: AMD-SB-8003 Potential Impact: Information Integrity Severity: Refer to the Summary section for details Summary Improper input validation in ARM® Trusted Firmware used in AMD ZynqTM UltraScale+TM MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads potentially...

WordPress Media Library Assistant Plugin <= 3.18 is vulnerable to Arbitrary File Upload

Software Media Library Assistant Type Plugin Vulnerable versions = 3.18 Fixed in 3.19 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-6823 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID 84d8203c5d37 Credits wesley wcraft Required privile...

WordPress Houzez Theme <= 3.2.4 is vulnerable to Cross Site Scripting (XSS)

Software Houzez Type Theme Vulnerable versions = 3.2.4 Fixed in 3.2.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43244 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ff16d96c9ebd Credits Jorge Rodriguez Required privilege...

WordPress Bitly Plugin <= 2.7.2 is vulnerable to Broken Access Control

Software Bitly Type Plugin Vulnerable versions = 2.7.2 Fixed in 2.7.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43209 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 1d22e84d1285 Credits Abdi Pranata Required privilege...

WordPress Form Maker by 10Web Plugin <= 1.15.26 is vulnerable to Cross Site Scripting (XSS)

Software Form Maker by 10Web Type Plugin Vulnerable versions = 1.15.26 Fixed in 1.15.27 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43220 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 77f57c6e5d92 Credits Le Ngoc Anh Required...

WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce Plugin <= 2.6.14 is vulnerable to Cross Site Scripting (XSS)

Software Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce Type Plugin Vulnerable versions = 2.6.14 Fixed in 2.6.16 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43126 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership...

WordPress Robin image optimizer Plugin <= 1.6.9 is vulnerable to Broken Access Control

Software Robin image optimizer Type Plugin Vulnerable versions = 1.6.9 Fixed in 1.7.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43122 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID a94e3ea55a34 Credits Joshua Chan...

WordPress Multipurpose Theme <= 1.2.0 is vulnerable to PHP Object Injection

Software Multipurpose Type Theme Vulnerable versions = 1.2.0 Fixed in N/A OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-7486 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID 5a908ef6f2c7 Credits Francesco Carlucci Required privilege...

WordPress The Next LVL Theme <= 1.1.0 is vulnerable to PHP Object Injection

Software The Next LVL Type Theme Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-7561 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID b79740b6d53a Credits Francesco Carlucci Required privilege...

WordPress Products, Order & Customers Export for WooCommerce Plugin <= 2.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Products, Order & Customers Export for WooCommerce Type Plugin Vulnerable versions = 2.0.11 Fixed in 2.0.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43127 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0c64f76a48fe...