161 matches found
CVE-2024-12637
Public technical details about CVE-2024-12637 are not provided in the Connected documents. The Initial Description notes Sensitive Information Exposure via export in Moving Users (WordPress) up to v1.05, but no further technical specifics or patches are included here.
PT-2025-1922 · WordPress · Moving Users
Name of the Vulnerable Software and Affected Versions: Moving Users plugin for WordPress versions up to and including 1.05 Description: The Moving Users plugin for WordPress is vulnerable to sensitive information exposure in its export functionality. This issue arises because JSON files are store...
WordPress plugin Moving Users 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...
WordPress Moving Users plugin <= 1.05 - Unauthenticated Sensitive Information Exposure vulnerability
Unauthenticated Sensitive Information Exposure vulnerability discovered by omstaendlig in WordPress Plugin Moving Users versions = 1.05...
CVE-2024-51491 Process crash during CRL-based revocation check on OS using separate mount point for temp Directory in notation-go
notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was identified during Quarkslab's security audit on the Certificate Revocation List CRL based revocation check feature. After retrieving the CRL, notation-go...
gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c
A flaw was found in the GStreamer library. An integer overflow in the MP4/MOV demuxer's sample table parser can lead to out-of-bounds writes and NULL-pointer dereferences for certain input files. This vulnerability allows a malicious third party to trigger an application crash and, in the case of...
DEBIAN-CVE-2024-50066
In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix movenormalpmd/retractpagetables race In mremap, movepagetables looks at the type of the PMD entry and the specified address range to figure out by which method the next chunk of page table entries should be moved. ...
MAL-2024-6994 Malicious code in multi-movingsign (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6992 Malicious code in moving-words (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in moving-words (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in moving-images (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in moving-average (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6991 Malicious code in moving-images (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6990 Malicious code in moving-average (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-27286
Zulip is an open-source team collaboration tool. When a user moves a Zulip message, they have the option to move all messages in the topic, move only subsequent messages as well, or move just a single message. If the user chose to just move one message, and was moving it from a public stream to a...
CVE-2024-27286 Moving single messages from public to private streams leaves them accessible
Zulip is an open-source team collaboration tool. When a user moves a Zulip message, they have the option to move all messages in the topic, move only subsequent messages as well, or move just a single message. If the user chose to just move one message, and was moving it from a public stream to a...
BIT-GITLAB-2021-39886
Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing users to read confidential Epic references...
movingglass.es Improper Access Control vulnerability OBB-3822759
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2020-10676
In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have certain access to a namespace to move that namespace to a different project...