861 matches found
PT-2025-3149 · Typo3 · Typo3
Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 11.5.42 ELTS TYPO3 versions prior to 12.4.25 LTS TYPO3 versions prior to 13.4.3 LTS Description: A vulnerability has been identified in the backend user interface functionality involving deep links, which is susceptibl...
PT-2025-3145 · Typo3 · Typo3
Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 11.5.42 ELTS TYPO3 versions prior to 12.4.25 LTS TYPO3 versions prior to 13.4.3 LTS Description: A vulnerability has been identified in the backend user interface functionality involving deep links, which is susceptibl...
CVE-2021-32007 Missing security header: Referrer-Policy URL
This issue affects: Secomea GateManager Version 9.5 and all prior versions. Protection Mechanism Failure vulnerability in web server of Secomea GateManager to potentially leak information to remote servers...
Brave Software: Incorrect security UI of files' download source on brave MacOS
The incorrect display of the download source in the Brave download alert was identified. Instead of displaying the actual source of the downloaded file, the browser displayed the referrer header value, which could have misled users into believing the file was from a trusted source...
CVE-2024-52410
Deserialization of Untrusted Data vulnerability in Phoenixheart Referrer Detector referrer-detector allows Object Injection.This issue affects Referrer Detector: from n/a through = 4.2.1.0...
CVE-2024-52410 WordPress Referrer Detector plugin <= 4.2.1.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Phoenixheart Referrer Detector referrer-detector allows Object Injection.This issue affects Referrer Detector: from n/a through = 4.2.1.0...
CVE-2024-52410 WordPress Referrer Detector plugin <= 4.2.1.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Phoenixheart Referrer Detector referrer-detector allows Object Injection.This issue affects Referrer Detector: from n/a through = 4.2.1.0...
CVE-2024-52410
CVE-2024-52410 is a PHP object injection risk in the WordPress Referrer Detector plugin up to version 4.2.1.0. The vulnerability arises from deserialization of untrusted data, enabling potential object injection. Affected software: Referrer Detector (WordPress plugin) with versions n/a through 4....
WordPress plugin Referrer Detector 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
WordPress Referrer Detector plugin <= 4.2.1.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin Referrer Detector versions = 4.2.1.0...
WordPress Referrer Detector Plugin <= 4.2.1.0 is vulnerable to PHP Object Injection
Software Referrer Detector Type Plugin Vulnerable versions = 4.2.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52410 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 462ef6116947 Credits Bonds Required privilege Unauthenticat...
Open Redirection
Keycloak is vulnerable to an Open Redirection. The vulnerability is due to improper validation of the referrer and referreruri parameters, allowing attackers to craft URLs that trick users into visiting malicious websites...
keycloak-core: Open Redirect on Account page
An open redirect vulnerability was found in Keycloak. A specially crafted URL can be constructed where the referrer and referreruri parameters are made to trick a user to visit a malicious webpage. A trusted URL can trick users and automation into believing that the URL is safe, when, in fact, it...
PT-2024-38217
Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description An open redirect issue exists in Keycloak, where a specially crafted URL can be constructed to trick users into visiting a malicious webpage. The referrer and referrer uri parameters can be...
Red Hat Keycloak 输入验证错误漏洞
Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. Red Hat Keycloak suffers from an input validation error vulnerability that stems from the inclusion of an open redirection vulnerability. An...
CVE-2024-1639
The License Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the showLicenseKey and showAllLicenseKeys functions in all versions up to, and including, 3.0.6. This makes it possible for authenticated attackers, with admi...
CVE-2024-33999
The referrer URL used by MFA required additional sanitizing, rather than being used directly...
UBUNTU-CVE-2024-33999
The referrer URL used by MFA required additional sanitizing, rather than being used directly...
