563 matches found
WordPress Autochat Automatic Conversation plugin unauthorized data modification vulnerability
WordPress Autochat Automatic Conversation plugin is an automated chat plugin designed for WordPress, which is mainly used to automate the communication between website visitors and merchants. WordPress Autochat Automatic Conversation plugin suffers from an unauthorized data modification...
WordPress plugin Admin and Customer Messages After Order for WooCommerce: OrderConvo 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An unauthorized access vulnerability exists in the WordPress Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin, which stems from a lack of privilege...
WordPress plugin Autochat Automatic Conversation 安全漏洞
WordPress Autochat Automatic Conversation plugin is an automated chat plugin designed for WordPress, which is mainly used to automate the communication between website visitors and merchants. WordPress Autochat Automatic Conversation plugin suffers from an unauthorized data modification...
WordPress Cryptocurrency Payment Gateway for WooCommerce plugin unauthorized data modification vulnerability
WordPress Cryptocurrency Payment Gateway for WooCommerce plugin is a virtual currency payment collection plugin designed for WooCommerce e-commerce platform. WordPress Cryptocurrency Payment Gateway for WooCommerce plugin suffers from an unauthorized data modification vulnerability that stems fro...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from insufficient privilege checking and could result in access to...
Apple多款产品 安全漏洞
Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple visionOS is an operating system for AR glasses. A security vulnerability exists in several Apple products that stems from insufficient...
Jenkins Start Windocks Containers Plugin 安全漏洞
Jenkins Start Windocks Containers Plugin is an open source plugin for Jenkins to link WinDocks hosts. A security vulnerability exists in Jenkins Start Windocks Containers Plugin 1.4 and earlier versions, which stems from a lack of privilege checking and could lead an attacker to connect to an...
Jenkins Publish to Bitbucket Plugin 安全漏洞
Jenkins Publish to Bitbucket Plugin is an automated publishing plugin for Jenkins open source. A security vulnerability exists in Jenkins Publish to Bitbucket Plugin 0.4 and earlier versions, which stems from a lack of privilege checking and could lead an attacker to enumerate credential IDs stor...
Jenkins plugin Nexus Task Runner 安全漏洞
Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...
Jenkins Themis Plugin 安全漏洞
Jenkins Themis Plugin is an open source plugin for Jenkins. A security vulnerability exists in Jenkins Themis Plugin 1.4.1 and earlier versions, which stems from a lack of privilege checking and could allow an attacker to connect to a specially crafted HTTP server...
Jenkins Publish to Bitbucket Plugin 安全漏洞
Jenkins Publish to Bitbucket Plugin is an open source automated publishing plugin for Jenkins. A security vulnerability exists in Jenkins Publish to Bitbucket Plugin version 0.4 and earlier, which stems from a lack of privilege checking and could lead to an attacker capturing credentials stored i...
SUSE SLES15 Security Update : kernel (Live Patch 56 for SLE 15 SP3) (SUSE-SU-2025:03664-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03664-1 advisory. This update for the Linux Kernel 5.3.18-15030059201 fixes several issues. The following security issues were fixed: - CVE-2025-38499:...
EUVD-2025-34849
An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authentication mechanism allows unauthorized access to protected API endpoints, including those intended for administrative functions. This vulnerability can be...
CVE-2025-9152 Improper Privilege Management in Multiple WSO2 API Manager via keymanager-operations DCR Endpoint
An improper privilege management vulnerability exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR endpoint. A malicious user can exploit this flaw to generate access tokens with elevated privileges,...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability in Mattermost versions 10.11.1 and prior to 10.11.x, 10.10.2 and prior to 10.10.x, and 10.5.10 and prior to 10.5.x stems from a failure to validate that a user has the privileg...
WordPress Custom Searchable Data Entry System plugin missing privileges vulnerability
WordPress Custom Searchable Data Entry System plugin is a plugin for creating a searchable data entry system in your website that allows users to fill in information based on specific criteria and enables data matching queries. The WordPress Custom Searchable Data Entry System plugin suffers from...
EUVD-2019-7944
Malware in sbrugna...
EUVD-2011-4514
Malware in sbrugna...