10345 matches found
PT-2024-33157 · Solidus · Solidus
Name of the Vulnerable Software and Affected Versions: Solidus versions prior to 4.3.5 Description: The issue is related to a Stored Cross-Site Scripting vulnerability in the order tracking URL. Recommendations: For versions prior to 4.3.5, update to version 4.3.5 or later to resolve the issue...
WordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.9 is vulnerable to PHP Object Injection
Software Order Export & Order Import for WooCommerce Type Plugin Vulnerable versions = 2.4.9 Fixed in 2.5.0 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-34751 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID 6a894e737867 Credits Trình Vũ...
CVE-2024-27400 drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: once more fix the call oder in amdgputtmmove v2 This reverts drm/amdgpu: fix ftrace event amdgpubomove always move on same heap. The basic problem here is that after the move the old location is simply not available a...
CVE-2024-27400
CVE-2024-27400 affects the Linux kernel drm/amdgpu subsystem. The issue stems from the call order in amdgpu_ttm_move() which caused the old location to become unavailable after a move, affecting DMA-buf and VM move notifications. The fix prioritizes notifying the move before performing the actual...
CVE-2024-27400 drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: once more fix the call oder in amdgputtmmove v2 This reverts drm/amdgpu: fix ftrace event amdgpubomove always move on same heap. The basic problem here is that after the move the old location is simply not available a...
CVE-2024-4213
CVE-2024-4213 concerns the WordPress plugin Shopping Cart & eCommerce Store (WP-EasyCart). The vulnerability is a case of Sensitive Information Exposure via the plugin’s order report functionality in all versions up to 5.6.4, allowing unauthenticated attackers to extract order details and other P...
CVE-2024-4213 Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.4 via the order report functionality. This makes it possible for unauthenticated attackers to extract sensitive data including order details such as...
CVE-2024-4213 Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.4 via the order report functionality. This makes it possible for unauthenticated attackers to extract sensitive data including order details such as...
Shopping Cart & eCommerce Store < 5.6.5 - Sensitive Information Exposure
Description The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.4 via the order report functionality. This makes it possible for unauthenticated attackers to extract sensitive data including order detai...
CVE-2024-34556 WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data Exposure via Exported File vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through =...
CVE-2024-34557
CVE-2024-34557 : CSRF vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager (WordPress plugin). Affected: Barcode Scanner with Inventory & Order Manager: from n/a through 1.5.4. Description in connected sources confirms CSRF risk; exploitation could allow unauthorized action...
CVE-2024-34557 WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through = 1.5.4...
PT-2024-29198
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises from the Linux kernel's ext4 file system, where the ratelimit state-lock is accessed before it is initialized in the ext4 fill super function. This occurs due to a...
WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.5.4...
WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data Exposure via Exported File vulnerability
Sensitive Data Exposure via Exported File vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.5.4...
WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.4 is vulnerable to Cross Site Request Forgery (CSRF)
Software Barcode Scanner with Inventory & Order Manager Type Plugin Vulnerable versions = 1.5.4 Fixed in 1.5.5 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34557 Patch priority Low CVSS severity Low 4.3 Developer DMitry PSID 2014d221439f Credi...
WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.4 is vulnerable to Sensitive Data Exposure
Software Barcode Scanner with Inventory & Order Manager Type Plugin Vulnerable versions = 1.5.4 Fixed in 1.5.5 OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2024-34556 Patch priority Low CVSS severity Low 5.3 Developer DMitry PSID 3b6260611936 Credits...
PT-2024-13097 · Qualcomm · Snapdragon +54
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption when the bandpass filter order received from AHAL is not within the expected range. This can lead to improper...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when the received bandpass filter order from AHAL is not within the expected range...
