CVE-2023-46195

CVE-2023-46195 – WordPress Headline Analyzer (CoSchedule)

CVE-2023-46082

CVE-2023-46082 affects the WordPress plugin Broken Link Checker | Finder (Broken Link Checker plugin) up to version 2.4.2. The vulnerability is a Missing Authorization/Broken Access Control issue that allows unauthenticated access to moblc_auth_save_settings, enabling unauthorized actions. Patchs...

CVE-2023-46080

CVE-2023-46080 : WordPress plugin ApplyOnline – Application Form Builder and Manager

CVE-2023-46079

CVE-2023-46079 affects the WordPress Ashe Extra plugin (

CVE-2023-45828

CVE-2023-45828 affects the WordPress RumbleTalk Live Group Chat plugin (versions up to and including 6.2.5). The issue is a Missing/Incorrectly Configured Authorization vulnerability (Broken Access Control) in the plugin’s handling of AJAX/authorization checks (handleRequest and related flows), a...

CVE-2023-45765

CVE-2023-45765 concerns weDevs WP ERP plugin versions

CVE-2023-45275

The CVE-2023-45275 entry refers to a Missing Authorization / Broken Access Control issue in the WordPress Kali Forms plugin (Contact Form builder with drag & drop). Affected versions are Kali Forms through 2.3.28; the vulnerability stems from an access-control weakness that could be exploited by ...

CVE-2023-45110

CVE-2023-45110 concerns Bold Timeline Lite (WordPress plugin) with a Missing Authorization/Broken Access Control vulnerability present up to version

CVE-2023-45271

The CVE-2023-45271 entry concerns the WordPress plugin ProductX – Gutenberg WooCommerce Blocks (

CVE-2023-45045

CVE-2023-45045 concerns the WP Custom Widget area plugin for WordPress (versions up to and including 1.2.5). The issue is a Missing Authorization (Broken Access Control) vulnerability that arises from incorrectly configured access control security levels, enabling improper access by users with su...

CVE-2023-45002

CVE-2023-45002 concerns the WordPress plugin WP User Frontend (weDevs) with Missing Authorization via AJAX actions up to version 3.6.8. The issue originates from Inadequate access control (Broken Access Control) that can be exploited by users with low privileges to bypass configured security leve...

CVE-2023-44258

CVE-2023-44258 affects the WordPress plugin Schema App Structured Data for Schema.org (Schema App Structured Data) versions 1.23.1 and earlier. The root cause is Missing Authorization via page_init, i.e., broken access control that can permit unauthorized access to sensitive data. CVSS v3.1 base ...

CVE-2023-44988

CVE-2023-44988 affects the WordPress plugin WP Custom Admin Interface (versions

CVE-2023-48775

CVE-2023-48775 affects the WordPress WP Cleanfix plugin, specifically versions through 5.6.2. The root cause is a Missing Authorization / Broken Access Control vulnerability in the plugin’s access checks, enabling exploitation due to incorrectly configured security levels. The CVSSv3.1 base score...

SUSE CVE-2024-56677

In the Linux kernel, the following vulnerability has been resolved: powerpc/fadump: Move fadumpcmainit to setuparch after initmeminit During early init CMAMINALIGNMENTBYTES can be PAGESIZE, since pageblockorder is still zero and it gets initialized later during initmeminit e.g. setuparch -...

SUSE CVE-2024-56699

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f "s390/pci: remove hotplug slot when releasing the device" the zpciexitslot was moved from zpcidevicereserved to zpcireleasedevice with the intention of...

DEBIAN-CVE-2024-56699

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f "s390/pci: remove hotplug slot when releasing the device" the zpciexitslot was moved from zpcidevicereserved to zpcireleasedevice with the intention of...

UBUNTU-CVE-2024-56699

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f "s390/pci: remove hotplug slot when releasing the device" the zpciexitslot was moved from zpcidevicereserved to zpcireleasedevice with the intention of...

CVE-2022-48470

CVE-2022-48470 affects Huawei HiLink AI Life; an identity authentication bypass could allow attackers to access restricted functions. This is associated with HWPSIRT-2022-42291. Documents identify the affected product and vulnerability class but do not provide explicit patch versions or detailed ...

CVE-2020-1824

CVE-2020-1824 is an OOB read vulnerability in Huawei devices' COPS protocol implementation. The issue stems from the decoding function processing incoming data packets, enabling an out-of-bounds read that may disrupt device service. The entry groups seven related CVEs (CVE-2020-1818 to CVE-2020-1...