CVE-2019-15775

The nd-learning plugin before 4.8 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...

CVE-2019-15775

CVE-2019-15775 affects the WordPress nd-learning plugin (prior to version 4.8). It exposes a nopriv_ AJAX action that can modify the siteurl setting, enabling unauthenticated modification of site configuration. Impact as documented: potential compromise of site URL, with CVSS v3 base score 6.1 (M...

CVE-2019-15773

The CVE-2019-15773 entry concerns the WordPress nd-travel plugin prior to 1.7. A nopriv_ AJAX action enables modification of the siteurl setting, meaning an unauthenticated user could alter the site URL via AJAX. Affected component: nd-travel plugin (WordPress). Root cause: insufficient access co...

CVE-2019-15772

The nd-donations plugin before 1.4 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...

CVE-2019-15772

The CVE-2019-15772 issue affects the WordPress nd-donations plugin prior to version 1.4. It exposes a nopriv_ AJAX action that allows modification of the siteurl setting. This unauthenticated capability can enable an attacker to alter the site’s URL configuration, depending on the vulnerable envi...

CVE-2019-15775: URL Redirection to Untrusted Site

The nd-learning plugin before 4.8 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...

PT-2019-14380

Name of the Vulnerable Software and Affected Versions nd-shortcodes plugin versions prior to 6.0 Description The issue allows modification of the siteurl setting through a nopriv AJAX action. Recommendations For nd-shortcodes plugin versions prior to 6.0, update to version 6.0 or later to resolve...

PT-2019-14381

Name of the Vulnerable Software and Affected Versions nd-donations plugin versions prior to 1.4 Description The issue allows modification of the siteurl setting through a nopriv AJAX action. Recommendations For versions prior to 1.4, update to version 1.4 or later to resolve the issue...

PT-2019-14382

Name of the Vulnerable Software and Affected Versions nd-travel plugin versions prior to 1.7 Description The issue allows modification of the siteurl setting through a nopriv AJAX action. Recommendations For nd-travel plugin versions prior to 1.7, update to version 1.7 or later to resolve the iss...

PT-2019-14383

Name of the Vulnerable Software and Affected Versions nd-booking plugin versions prior to 2.5 Description The issue allows modification of the siteurl setting through a nopriv AJAX action. Recommendations For versions prior to 2.5, update the nd-booking plugin to version 2.5 or later to resolve t...

PT-2019-14384

Name of the Vulnerable Software and Affected Versions nd-learning plugin versions prior to 4.8 Description The issue allows modification of the siteurl setting through a nopriv AJAX action. Recommendations For versions prior to 4.8, update the nd-learning plugin to version 4.8 or later to resolve...

CVE-2019-15771: URL Redirection to Untrusted Site

The nd-shortcodes plugin before 6.0 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...

CVE-2019-15774: URL Redirection to Untrusted Site

The nd-booking plugin before 2.5 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...

CVE-2019-15773: URL Redirection to Untrusted Site

The nd-travel plugin before 1.7 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...

CVE-2019-15772: URL Redirection to Untrusted Site

The nd-donations plugin before 1.4 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server ND which is used by IBM Rational ClearQuest (CVE-2019-4279)

Summary IBM WebSphere Application Server WAS is used by the IBM Rational ClearQuest server and web components. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

A Security Vulnerability Has Been Identified In IBM WebSphere Application Server ND shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2019-4279)

Summary IBM WebSphere Application Server ND is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM WebSphere Application Server ND has been published in a security bulletin. Vulnerability Details Refer to the security...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2019-4279)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details For details about the vulnerability and information about fixe...

PT-2019-18152

Name of the Vulnerable Software and Affected Versions Medtronic MyCareLink Monitor versions 24950 through 24952 CareLink Monitor version 2490C CareLink 2090 Programmer Amplia CRT-D Claria CRT-D Compia CRT-D Concerto CRT-D Concerto II CRT-D Consulta CRT-D Evera ICD Maximo II CRT-D and ICD Mirro IC...

CVE-2019-6540: Cleartext Transmission of Sensitive Information

The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro IC...