5395 matches found
CVE-2023-37188
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfpratedecompress at zfp/blosc2-zfp.c...
PT-2023-25824 · C-Blosc2 · C-Blosc2
Name of the Vulnerable Software and Affected Versions: C-blosc2 versions prior to 2.9.3 Description: The issue is related to a NULL pointer dereference in the function zfp rate decompress at zfp/blosc2-zfp.c. This indicates a problem where the code attempts to access memory through a null...
Blosc C-Blosc2 Security Vulnerability
Blosc C-Blosc2 is a code library from the Blosc team that enables deep compression of binary data. The goal of the software is to reduce the size of large datasets on disk or in memory, speeding up memory-bound computations. The software supports BloscLZ, a compression program based on FastLZ, LZ...
CVE-2023-49765
Authorization Bypass Through User-Controlled Key vulnerability in Blaz K. Rate my Post – WP Rating System.This issue affects Rate my Post – WP Rating System: from n/a through 3.4.1...
CVE-2023-49765 WordPress Rate my Post – WP Rating System Plugin <= 3.4.1 is vulnerable to Insecure Direct Object References (IDOR)
Authorization Bypass Through User-Controlled Key vulnerability in Blaz K. Rate my Post – WP Rating System.This issue affects Rate my Post – WP Rating System: from n/a through 3.4.1...
CVE-2023-49765
CVE-2023-49765 affects the WordPress plugin Rate my Post – WP Rating System (versions
PT-2023-31335 · WordPress · Rate My Post – Wp Rating System
Name of the Vulnerable Software and Affected Versions: Rate my Post – WP Rating System versions 3.4.1 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability affects the Rate my Post – WP Rating System plugin...
WordPress plugin Rate my Post - WP Rating System Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2023-6272
The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits...
CVE-2023-6272 Theme My Login 2FA < 1.2 - Lack of Rate Limiting
The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits...
CVE-2023-49150
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CurrencyRate.Today Crypto Converter Widget allows Stored XSS.This issue affects Crypto Converter Widget: from n/a through 1.8.1...
CVE-2023-49149
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CurrencyRate.Today Currency Converter Calculator allows Stored XSS.This issue affects Currency Converter Calculator: from n/a through 1.3.1...
Zammad Access Control Error Vulnerability (CNVD-2023-9782629)
Zammad is a suite of ticket management software from the German company Zammad. An access control error vulnerability exists in Zammad, which stems from a lack of rate limiting in the email address verification function, and can be exploited by an attacker to potentially send many requests to a...
CVE-2023-50455
An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature, an attacker could send many requests for a known address to cause Denial Of Service generation of many emails, which would also spam the victim...
CVE-2023-50455
An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature, an attacker could send many requests for a known address to cause Denial Of Service generation of many emails, which would also spam the victim...
Zammad 安全漏洞
Zammad is a suite of ticket management software from the German company Zammad. An access control error vulnerability exists in Zammad, which stems from a lack of rate limiting in the email address verification function, and can be exploited by an attacker to potentially send many requests to a...
PT-2023-31559 · Zammad · Zammad
Name of the Vulnerable Software and Affected Versions: Zammad versions prior to 6.2.0 Description: An issue was discovered due to a lack of rate limiting in the "email address verification" feature. This allows an attacker to send many requests for a known address, causing Denial Of Service by...
CVE-2023-48840
A lack of rate limiting in pjActionAjaxSend in Appointment Scheduler 3.0 allows attackers to cause resource exhaustion...