87961 matches found
CGA-PFH4-493R-7GRQ
Bulletin has no description...
CGA-X32J-MGQX-57Q3
Bulletin has no description...
GHSA-6X7X-GCMF-7R8X YesWiki vulnerable to unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` action
Summary The erasespamedcomments wiki action actions/EraseSpamedCommentsAction.php accepts a suppr array from POST and deletes every wiki page whose tag appears in that array, with no authorization check anywhere in the action body or in the page-deletion path it invokes. Combined with YesWiki's...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the erasespamedcomments process. An attacker can permanently delete arbitrary wiki pages, including critical or administrative pages, by sending crafted POST requests containing a suppr array with targeted page...
MINI-X37R-9R93-3824
Bulletin has no description...
MINI-482W-65MF-4R7V
Bulletin has no description...
MINI-C8F6-XXGG-45HJ
Bulletin has no description...
MINI-C6FQ-CV7F-966H
Bulletin has no description...
MINI-MWJH-H39H-5J24
Bulletin has no description...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization due to insufficient enforcement of host revocation and operator status during certificate issuance and renewal processes. An attacker can regain valid certificates for blocked or offboarded hosts by re-enrolling or...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization due to insufficient enforcement of host revocation and operator status during certificate issuance and renewal processes. An attacker can regain valid certificates for blocked or offboarded hosts by re-enrolling or...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization due to insufficient enforcement of host revocation and operator status during certificate issuance and renewal processes. An attacker can regain valid certificates for blocked or offboarded hosts by re-enrolling or...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization due to insufficient enforcement of host revocation and operator status during certificate issuance and renewal processes. An attacker can regain valid certificates for blocked or offboarded hosts by re-enrolling or...
MINI-M2JF-W3CG-2M26
Bulletin has no description...
WordPress Invoice123 plugin <= 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Setting Modification vulnerability
Missing Authorization to Authenticated Subscriber+ Setting Modification vulnerability discovered by Benedictus Jovan aillesiM in WordPress Plugin Invoice123 versions = 1.7.0...
MINI-PX64-PX8Q-75JV
Bulletin has no description...
MINI-CR8P-W667-75MH
Bulletin has no description...
MINI-5558-WXWG-525J
Bulletin has no description...