13142 matches found
wordpress -- multiple issues
wordpress developers reports: Ten security issues affect WordPress versions 5.5.1 and earlier. If you havent yet updated to 5.5, all WordPress versions since 3.7 have also been updated to fix the following security issues: -Props to Alex Concha of the WordPress Security Team for their work in...
The vulnerability of the Microsoft .NET Framework software, related to errors in memory object handling, allows an attacker to gain unauthorized access to protected information.
The vulnerability of the Microsoft .NET Framework software platform is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
WordPress <= 5.5.1 - Bypass Protected Meta That Could Lead To Arbitrary File Deletion vulnerability
Bypass Protected Meta That Could Lead To Arbitrary File Deletion vulnerability found by Slavco Mihajloski mslavco in WordPress versions = 5.5.1. Solution Update the WordPress to the latest available version at least 5.5.2...
The vulnerability of the service for managing access to remote catalogs and authentication mechanisms, related to deficiencies in access control, allows attackers to disclose protected information and compromise its integrity.
The vulnerability of the service for managing access to remote catalogs and the authentication mechanism sssd is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information and compromise its integri...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in memory object processing errors, which allow an attacker to gain unauthorized access to protected information.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in memory object processing errors, which allow an attacker to gain unauthorized access to protected information.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Microsoft SharePoint Server software, related to errors in memory object handling, allows an intruder to gain unauthorized access to protected information.
The vulnerability of the Microsoft SharePoint Server software is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Microsoft Exchange Server servers, related to errors in message processing, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Microsoft Exchange Server is related to errors in message processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2018-4433
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, watchOS 5, iOS 12, tvOS 12, macOS Mojave 10.14. A malicious application may be able to modify protected parts of th...
The vulnerability of the set_file_metadata function in the GNU Wget download manager allows a hacker to gain access to protected information.
The vulnerability of the setfilemetadata function in the GNU Wget download manager is related to the lack of protection for metadata. Exploiting this vulnerability could allow an attacker to access protected information...
The vulnerability of the Tricon Communications Module, related to the lack of protection for operational data, allows attackers to disclose the protected information.
The vulnerability of the Tricon Communications Module is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability of Intel Thunderbolt controller interfaces, related to insufficient input data validation, allows attackers to gain unauthorized access to protected information.
The vulnerability of Intel Thunderbolt controller interfaces is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Huawei Taurus-AN00B Elevation of Privilege Vulnerability
Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A security vulnerability exists in Huawei Taurus-AN00B versions prior to 10.1.0.156, which stems from a lack of privilege restrictions on certain business functions of the product. An attacker can exploit the vulnerabili...
CVE-2020-9771
This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A user may gain access to protected parts of the file system...
CVE-2020-9771
This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A user may gain access to protected parts of the file system...
The vulnerability of the Windows Setup application’s installation process allows a perpetrator to enhance their privileges and gain unauthorized access to protected information.
The vulnerability of the Windows Setup application’s installation process is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information...
The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to elevate their privileges and gain unauthorized access to protected information.
The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected...
The vulnerability of Intel processor BIOS microprogramming software, related to privilege management errors, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Intel processor BIOS microprogramming software is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the do_bid_note function in the File type detection utility allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dobidnote function in the File type-detection utility readelf.c involves reading beyond the allocated buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Adobe Photoshop graphic editor, related to reading data beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...