9685 matches found
CISA Known Exploited Vulnerability Catalog December 2023
For a detailed CISAs KEV Catalog, download the pdf file here Summary The Known Exploited Vulnerability KEV catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild. It is recommended that all organizations review and monitor the KEV catalog,...
WordPress Download Monitor Plugin < 4.7.70 Information Disclosure Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpchill:downloadmonitor"; if description...
Apple Magic Keyboard Security Flaw
The Apple Magic Keyboard is a wireless keyboard from Apple, Inc. A security vulnerability exists in Apple Magic Keyboard, which stems from a session management issue that allows an attacker with access to the physical accessory to extract its Bluetooth pairing key and monitor Bluetooth...
CVE-2022-45354
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...
CVE-2022-45354
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...
Design/Logic Flaw
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...
CVE-2022-45354 WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...
CVE-2022-45354 WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...
CVE-2022-45354
The WPChill Download Monitor WordPress plugin is vulnerable to Sensitive Information Exposure in versions up to and including 4.7.60 . This flaw exists within the REST API and allows unauthenticated attackers to extract sensitive data, including user reports , download reports , and specific user...
[SECURITY] Fedora 38 Update: python-wled-0.4.4-11.fc38
This package allows you to control and monitor an WLED device programmatically. It is mainly created to allow third-party programs to automate the behavior of WLED...
[SECURITY] Fedora 39 Update: python-wled-0.4.4-11.fc39
This package allows you to control and monitor an WLED device programmatically. It is mainly created to allow third-party programs to automate the behavior of WLED...
WordPress Download Monitor Plugin < 4.9.5 is vulnerable to SQL Injection
Software Download Monitor Type Plugin Vulnerable versions 4.9.5 Fixed in 4.9.5 OWASP Top 10 A1: Injection Classification SQL Injection CVE N/A Patch priority Low CVSS severity Low 7.2 Developer WPChill PSID 1be01d6b3a78 Credits WordFence Required privilege Administrator Published 8 January, 2024...
WordPress Plugin Download Monitor Information Disclosure Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2022-45354: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...
PT-2024-11704
Name of the Vulnerable Software and Affected Versions Download Monitor versions 4.7.60 and earlier Description The issue is related to the exposure of sensitive information to an unauthorized actor. This affects the Download Monitor plugin, potentially allowing unauthorized access to sensitive...
Xen Buffer Error Vulnerability
Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen, whic...
vmm-sys-util security vulnerability
vmm-sys-util is a collection of modules providing helpers and utilities used by several rust-vmm components. A security vulnerability exists in vmm-sys-util versions prior to 0.5.0 through 0.12.0 that stems from an out-of-bounds memory access vulnerability in the FamStructWrapper component...
WordPress Download Monitor Plugin < 4.8.4 Arbitrary File Upload Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpchill:downloadmonitor"; if description...
Denial Of Service (DOS)
QEMU virtual machine monitor is vulnerable to Denial Of Service DOS. The vulnerability is caused due to a DMA reentrancy issue leading to a use-after-free error found in the e1000e NIC emulation code. This can lead to a privileged guest user crash the QEMU process on the host, resulting in a Deni...
