36732 matches found
WordPress plugin Order Notification for Telegram 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2024-39762 · WordPress · Order Notification For Telegram
Name of the Vulnerable Software and Affected Versions: The Order Notification for Telegram plugin for WordPress versions up to, and including, 1.0.1 Description: The issue allows unauthorized test message sending due to a missing capability check on the nktgnfw send test message function. This...
WordPress Order Notification for Telegram plugin <= 1.0.1 - Missing Authorization to Unauthenticated Send Telegram Test Message vulnerability
Missing Authorization to Unauthenticated Send Telegram Test Message vulnerability discovered by István Márton in WordPress Plugin Order Notification for Telegram versions = 1.0.1...
CVE-2024-10327
A vulnerability in Okta Verify for iOS versions 9.25.1 beta and 9.27.0 including beta allows push notification responses through the iOS ContextExtension feature allowing the authentication to proceed regardless of the user’s selection. When a user long-presses the notification banner and selects...
CVE-2024-10327
A vulnerability in Okta Verify for iOS versions 9.25.1 beta and 9.27.0 including beta allows push notification responses through the iOS ContextExtension feature allowing the authentication to proceed regardless of the user’s selection. When a user long-presses the notification banner and selects...
CVE-2024-10327
A vulnerability in Okta Verify for iOS versions 9.25.1 beta and 9.27.0 including beta allows push notification responses through the iOS ContextExtension feature allowing the authentication to proceed regardless of the user’s selection. When a user long-presses the notification banner and selects...
CVE-2024-10327
CVE-2024-10327 affects Okta Verify for iOS 9.25.1 (beta)–9.27.0 (including beta). The vulnerability allows push notification responses via the iOS ContextExtension to authenticate regardless of user choice, across scenarios: locked-screen replies, home-screen drag-and-reply, and Apple Watch repli...
CVE-2024-6049
creationtimestamp| type| source ---|---|--- 2024-10-24 10:57:52+00:00| seen| https://t.me/cvedetector/8778...
October 24, 2024—KB5044384 (OS Build 26100.2161) Preview
None None...
WordPress Order Notification for Telegram Plugin <= 1.0.1 is vulnerable to Broken Access Control
Software Order Notification for Telegram Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9686 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c9ae0bfdb3a8 Credits István Márton...
BELL-CVE-2024-50048
Bulletin has no description...
BELL-CVE-2024-49986
Bulletin has no description...
BELL-CVE-2024-49859
Bulletin has no description...
BELL-CVE-2024-50055
Bulletin has no description...
BELL-CVE-2024-50024
Bulletin has no description...
BELL-CVE-2024-49975
Bulletin has no description...
BELL-CVE-2024-49934
Bulletin has no description...
CVE-2022-49007
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix NULL pointer dereference in nilfspalloccommitfreeentry Syzbot reported a null-ptr-deref bug: NILFS loop0: segctord starting. Construction interval = 5 seconds, CP frequency 3c 02 00 0f 85 26 05 00 00 49 8b 46 10 be a6...
October 22, 2024—KB5044380 (OS Builds 22621.4391 and 22631.4391) Preview
None None...
DEBIAN-CVE-2022-48954
In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix use-after-free in hsci KASAN found that addr was dereferenced after br2deveventwork was freed. ================================================================== BUG: KASAN: use-after-free in...