Security Bulletin: IBM Security Verify Privilege could allow an unauthenticated actor to obtain sensitive information (CVE-2024-31887)

Summary IBM Security Verify Privilege could allow an unauthenticated actor to obtain sensitive information. The issue has been addressed in an update. Vulnerability Details CVEID:CVE-2024-31887 DESCRIPTION: IBM Security Verify Privilege could allow an unauthenticated actor to obtain sensitive...

PT-2024-19105 · Electrolink · Electrolink Fm/Dab/Tv Transmitter

Name of the Vulnerable Software and Affected Versions: Electrolink FM/DAB/TV Transmitter affected versions not specified Description: The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages, allowing more critical operations to the...

Dell Unity Operating Environment Web Information Disclosure

The vulnerability of the Dell Unity Operating Environment’s operating environment for data storage management and functionality exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to disclose user session-related...

Netcat Code Execution

The vulnerability of the CMS system Netcat is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2024-3087 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 124.0.6367.60 Description: The issue is related to an out of bounds read in the Fonts component of Google Chrome, which can be exploited by a remote attacker to obtain potentially sensitive information from...

PT-2024-3077 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 124.0.6367.60 Description: The issue is related to insufficient data validation in the Browser Switcher component, which can be exploited by a remote attacker to inject scripts or HTML into a privileged page vi...

CVE-2023-48710

iTop is an IT service management platform. Files from the env-production folder can be retrieved even though they should have restricted access. Hopefully, there is no sensitive files stored in that folder natively, but there could be from a third-party module. The pages/exec.php script as been...

CVE-2024-32451

Cross-Site Request Forgery CSRF vulnerability in wpWax Legal Pages.This issue affects Legal Pages: from n/a through 1.4.2...

CVE-2024-32451 WordPress Legal Pages plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpWax Legal Pages.This issue affects Legal Pages: from n/a through 1.4.2...

CVE-2024-32451 WordPress Legal Pages plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpWax Legal Pages.This issue affects Legal Pages: from n/a through 1.4.2...

CVE-2024-32451

CVE-2024-32451 is a CSRF vulnerability in the WordPress plugin wpWax Legal Pages, affecting versions up to 1.4.2 (vulnerability exists in the plugin’s handling of CSRF-protected actions). The CVSS 3.1 metrics (NETWORK attack, LOW complexity, NONE privileges required, UI: Required, confidentiality...

CVE-2023-48710: Files or Directories Accessible to External Parties

iTop is an IT service management platform. Files from the env-production folder can be retrieved even though they should have restricted access. Hopefully, there is no sensitive files stored in that folder natively, but there could be from a third-party module. The pages/exec.php script as been...

CVE-2024-32451: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wpWax Legal Pages.This issue affects Legal Pages: from n/a through 1.4.2...

PT-2024-24582 · WordPress · Wpwax Legal Pages

Name of the Vulnerable Software and Affected Versions: wpWax Legal Pages versions 1.4.2 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user...

WordPress Plugin Legal Pages Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Legal Pages plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Legal Pages versions = 1.4.2...

WordPress Legal Pages Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Legal Pages Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32451 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4f155bb44624 Credits Dhabaleshwar Das Requir...

CVE-2024-3285

The Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'metaslider' shortcode in all versions up to, and including, 3.70.0 due to insufficient input sanitization and output escaping on us...

Post Type Builder < 2.1.4 - Subscriber+ Arbitrary Post/Page Creation

Description The plugin is vulnerable to unauthorized modification of data due to a missing capability check on a function. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary pages and posts...

CVE-2021-47182

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix scsimodesense buffer length handling Several problems exist with scsimodesense buffer length handling: 1 The allocation length field of the MODE SENSE10 command is 16-bits, occupying bytes 7 and 8 of the CDB. With...