231584 matches found
CVE-2024-1136
CVE-2024-1136 pertains to the WordPress plugin Coming Soon Page & Maintenance Mode, where an improperly implemented URL check in wpsm_coming_soon_redirect in all versions up to 2.2.1 allows unauthenticated attackers to view content when maintenance/coming-soon mode is enabled. The vulnerability i...
CVE-2024-0767
CVE-2024-0767 (Envo's Elementor Templates & Widgets for WooCommerce) is a CSRF in the plugin’s ajax_plugin_activation path that can let unauthenticated attackers activate arbitrary plugins if an admin is tricked into performing an action. The vulnerability affects WordPress installations using th...
CVE-2024-1516
CVE-2024-1516 : WP eCommerce for WordPress suffers unauthorized arbitrary post creation due to a missing capability check in check_for_saas_push() in all versions up to 3.15.1. The vulnerability is exploitable by unauthenticated actors to create posts with arbitrary content. Technical details spe...
CVE-2024-0431
CVE-2024-0431 — Gestpay for WooCommerce (WordPress) is a CSRF vulnerability in the ajax_set_default_card handler caused by missing/incorrect nonce validation. It allows unauthenticated attackers to set a user’s default card token via a forged request if a site admin is enticed to perform an actio...
CVE-2024-0432
CVE-2024-0432 concerns the Gestpay for WooCommerce plugin for WordPress. The issue is a CSRF vulnerability caused by missing or incorrect nonce validation in the ajax_delete_card function across versions up to 20221130. This enables unauthenticated attackers to delete a user’s default card token ...
CVE-2024-0768
CVE-2024-0768 affects Envo’s Elementor Templates & Widgets for WooCommerce for WordPress, with CSRF in the ajax_theme_activation path. It is exploitable by unauthenticated attackers who can trick an administrator into performing an action (activating an arbitrary installed theme). Affected versio...
CVE-2024-0682
CVE-2024-0682 affects the Page Restrict plugin for WordPress. It allows information disclosure by unauthenticated actors due to inadequate REST API access restrictions for private posts in all versions up to 2.5.5. Base CVSS 3.1 is 5.3 (Medium), Confidentiality impact: Low. No public remediation ...
CVE-2024-1791
CVE-2024-1791 concerns the CodeMirror Blocks plugin for WordPress. According to Red Hat and Wordfence sources, versions up to and including 1.2.4 are affected due to insufficient input sanitization and output escaping in the Code Mirror block, enabling a stored cross-site scripting (XSS) conditio...
CVE-2024-0433
Gestpay for WooCommerce (WordPress plugin) is vulnerable to Cross-Site Forgery via multiple AJAX endpoints (ajax_unset_default_card in versions up to 20221130; similarly documented in ajax_delete_card and related actions). The issue arises from missing/incorrect nonce validation, allowing unauthe...
CVE-2024-0680
CVE-2024-0680 affects the WP Private Content Plus plugin for WordPress (versions up to and including 3.6). The root cause is improper access restriction of posts via the REST API when a page is private, allowing unauthenticated attackers to view protected posts. The vulnerability is documented ac...
CVE-2024-1514
CVE-2024-1514 affects the WP eCommerce plugin for WordPress. It allows time-based blind SQL injection via the cart_contents parameter in all versions up to 3.15.1 due to insufficient escaping and lack of prepared statements, enabling unauthenticated attackers to append SQL to existing queries to ...
CVE-2024-22459
Dell ECS (versions 3.6–3.6.2.5, 3.7–3.7.0.6, and 3.8–3.8.0.4) contains an improper access control vulnerability that could allow a remote high-privileged attacker to access all buckets and their data within a namespace. The issue is confirmed across multiple sources in the connected documents and...
CVE-2021-47052
CVE-2021-47052 relates to the Linux kernel crypto-sa2ul path (rxd) where two error paths failed to free the rxd buffer, causing a memory leak. The vulnerability was resolved by fixing those paths to ensure rxd is freed on error exits. The provided documents confirm the issue in the crypto: sa2ul ...
CVE-2021-47053
In the Linux kernel, CVE-2021-47053 affects crypto: sun8i-ss where the pad object could leak memory due to several failure return paths not freeing the pad. The issue has been fixed in the kernel (memory leak); patches are available in the linked stableKernel commits. Impact is a resource leak (l...
CVE-2021-47051
CVE-2021-47051 affects the Linux kernel SPI driver for the Freescale/NXP fsl-lpspi. The issue is a PM (power management) reference leak in lpspi_prepare_xfer_hardware(): pm_runtime_get_sync increments the PM usage counter even when the operation fails, leading to an unbalanced reference. The fix ...
CVE-2021-47049
CVE-2021-47049 affects the Linux kernel driver hv: vmbus. The vulnerability is a use-after-free in __vmbus_open() caused by freeing open_info without removing it from the vmbus_connection. The fix is to remove open_info from the chn_msg_list before freeing it (explicit in the advisory). Impact is...
CVE-2021-47046
Summary (CVE-2021-47046) : In Linux kernel DRM/AMD display, the hdmi_14_process_transaction() path suffered an off-by-one read overflow due to a missing hdcp_i2c_offsets entry for HDCP_MESSAGE_ID_WRITE_CONTENT_STREAM_TYPE. A fix added the missing entry and copied the 0x0 offset from similar code,...
CVE-2021-47045
CVE-2021-47045 affects Linux kernel SCSI lpfc (lpfc_prep_els_iocb). The vulnerability arises when lpfc_issue_els_plogi() is called with a did that has no matching ndlp, causing a NULL pointer dereference to lpfc_nodelist. The fix returns an error status if no valid ndlp is found and updates ndlp ...
CVE-2021-47043
CVE-2021-47043 affects the Linux kernel media: venus: core subsystem. The issue is a resource leak in the error path of venus_probe(): if an error occurs after a successful of_icc_get() call, the operation must be undone. The mitigation is to replace of_icc_get() with devm_of_icc_get(), update th...