15 matches found
CVE-2026-32562
Missing Authorization vulnerability in WP Folio Team PPWP password-protect-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PPWP: from n/a through = 1.9.15...
CVE-2026-32562 WordPress PPWP plugin <= 1.9.15 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Folio Team PPWP password-protect-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PPWP: from n/a through = 1.9.15...
PT-2026-28060
Missing Authorization vulnerability in WP Folio Team PPWP password-protect-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PPWP: from n/a through = 1.9.15...
riscv: Fix IPIs usage in kfence_protect_page()
...
WordPress PPWP plugin < 1.9.11 - Subscriber+ Access Bypass via REST API vulnerability
Subscriber+ Access Bypass via REST API vulnerability discovered by Pierre Rudloff in WordPress Plugin PPWP versions 1.9.11...
SUSE CVE-2024-53687
In the Linux kernel, the following vulnerability has been resolved: riscv: Fix IPIs usage in kfenceprotectpage flushtlbkernelrange may use IPIs to flush the TLBs of all the cores, which triggers the following warning when the irqs are disabled: 3.455330 WARNING: CPU: 1 PID: 0 at kernel/smp.c:815...
UBUNTU-CVE-2024-53687
In the Linux kernel, the following vulnerability has been resolved: riscv: Fix IPIs usage in kfenceprotectpage flushtlbkernelrange may use IPIs to flush the TLBs of all the cores, which triggers the following warning when the irqs are disabled: 3.455330 WARNING: CPU: 1 PID: 0 at kernel/smp.c:815...
CVE-2024-53687 riscv: Fix IPIs usage in kfence_protect_page()
In the Linux kernel, the following vulnerability has been resolved: riscv: Fix IPIs usage in kfenceprotectpage flushtlbkernelrange may use IPIs to flush the TLBs of all the cores, which triggers the following warning when the irqs are disabled: 3.455330 WARNING: CPU: 1 PID: 0 at kernel/smp.c:815...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the RISC-V architecture in kfenceprotectpage, which may use IPIs when IRQs are disabled, resulting in a...
WordPress PPWP – Password Protect Pages plugin <= 1.9.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability
Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability discovered by Francesco Carlucci in WordPress Plugin PPWP versions = 1.9.5...
PT-2025-2980
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to the usage of IPIs in the kfence protect page function, which can trigger a warning when the irqs are disabled. The flush tlb kernel range function may use IPIs to flush...
WordPress PPWP – WordPress Password Protect Page Plugin <= 1.8.9 is vulnerable to Bypass Vulnerability
Software PPWP – WordPress Password Protect Page Type Plugin Vulnerable versions = 1.8.9 Fixed in 1.9.0 OWASP Top 10 A5: Broken Access Control Classification Bypass Vulnerability CVE CVE-2024-0620 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 33bb0c05c31f Credits Francesc...
WordPress PPWP – WordPress Password Protect Page Plugin < 1.8.6 is vulnerable to Cross Site Scripting (XSS)
Software PPWP – WordPress Password Protect Page Type Plugin Vulnerable versions 1.8.6 Fixed in 1.8.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4626 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID c899b093125c Credi...
The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.
The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created link...
MediaWiki 权限许可和访问控制问题漏洞
MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.31.12 and versions prior to 1.32.x series 1.35.x...