WordPress Events Addon for Elementor Plugin <= 2.1.3 is vulnerable to Broken Access Control

Software Events Addon for Elementor Type Plugin Vulnerable versions = 2.1.3 Fixed in 2.1.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47827 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 5dbac8531308 Credits Abdi Pranata...

WordPress Acme Fix Images Plugin <= 1.0.0 is vulnerable to Broken Access Control

Software Acme Fix Images Type Plugin Vulnerable versions = 1.0.0 Fixed in 2.0.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47793 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 51b5ada66dce Credits Abdi Pranata Required...

WordPress 10WebAnalytics Plugin <= 1.2.12 is vulnerable to Broken Access Control

Software 10WebAnalytics Type Plugin Vulnerable versions = 1.2.12 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47807 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID a7d2ad869475 Credits Abdi Pranata Required...

Intel Graphics Driver Advisory - Lenovo Support US

No description provided...

WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure

Software EWWW Image Optimizer Type Plugin Vulnerable versions = 7.2.0 Fixed in 7.2.1 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-40600 Patch priority Medium CVSS severity Medium 5.3 Developer Exactly WWW LLC PSID e83c448240a2 Credits Mika Required...

WordPress AMP+ Plus Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)

Software AMP+ Plus Type Plugin Vulnerable versions = 3.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5210 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dc153061411b Credits Nicolas Surribas Required...

Fedora 38 : chromium (2023-f29e9560a1)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f29e9560a1 advisory. update to 119.0.6045.123. Security fix for CVE-2023-5996 ---- update to 119.0.6045.105. Security fixes: High CVE-2023-5480: Inappropriate...

WordPress WP Slick Slider and Image Carousel Plugin <= 3.5 is vulnerable to Broken Access Control

Software WP Slick Slider and Image Carousel Type Plugin Vulnerable versions = 3.5 Fixed in 3.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 4e3994072e72 Credits Abdi...

WordPress Popup Anything Plugin <= 2.7 is vulnerable to Broken Access Control

Software Popup Anything Type Plugin Vulnerable versions = 2.7 Fixed in 2.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 4b0a6b545433 Credits Abdi Pranata Required...

WordPress Animator Plugin <= 3.0.10 is vulnerable to Broken Access Control

Software Animator Type Plugin Vulnerable versions = 3.0.10 Fixed in 3.0.11 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47689 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d20181d6d40f Credits Elliot Required privilege...

WordPress WP Logo Showcase Responsive Slider and Carousel Plugin <= 3.6 is vulnerable to Broken Access Control

Software WP Logo Showcase Responsive Slider and Carousel Type Plugin Vulnerable versions = 3.6 Fixed in 3.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 6513d49257c3...

WordPress WP Blog and Widget Plugin <= 2.5 is vulnerable to Broken Access Control

Software WP Blog and Widget Type Plugin Vulnerable versions = 2.5 Fixed in 2.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 2eb15fc7bcca Credits Abdi Pranata Required...

USN-6425-1: Samba vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Sri Nagasubramanian discovered that the Samba aclxattr VFS module incorrectly handled read-only files. When Samba is configured to ignore system ACLs, a remote attacker could possibly use this issue to...

USN-6467-2: Kerberos vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description USN-6467-1 fixed a vulnerability in Kerberos. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.04. Original advisory details: Robert Morris discovered tha...

WordPress Plainview Protect Passwords Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Plainview Protect Passwords Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47665 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c0503491a942 Credits Mika...

WordPress Category Post List Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Category Post List Widget Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47516 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID de7a709c5e66 Credits LEE SE HYOU...

WordPress Forms for Mailchimp by Optin Cat Plugin <= 2.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Forms for Mailchimp by Optin Cat Type Plugin Vulnerable versions = 2.5.4 Fixed in 2.5.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47545 Patch priority Medium CVSS severity Medium 5.9 Developer Claim ownership PSID 6854d5e5d188 Credits DoYeon Park...

WordPress Extra Product Options for WooCommerce Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)

Software Extra Product Options for WooCommerce Type Plugin Vulnerable versions = 3.0.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47658 Patch priority Medium CVSS severity Medium 5.9 Developer Claim ownership PSID 59c1ea87fa2e Credi...

WordPress Auto Affiliate Links Plugin <= 6.4.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Auto Affiliate Links Type Plugin Vulnerable versions = 6.4.2.4 Fixed in 6.4.2.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47652 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4fff57eac2c5 Credits LEE ...

FreeBSD : chromium -- multiple vulnerabilities (a1e27775-7a61-11ee-8290-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a1e27775-7a61-11ee-8290-a8a1599412c6 advisory. - Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a...