13 matches found
EUVD-2024-17192
Malicious code in bioql PyPI...
CVE-2024-1438
Missing Authorization vulnerability in PressFore Rolo Slider.This issue affects Rolo Slider: from n/a through 1.0.9...
CVE-2024-1438
Missing Authorization vulnerability in PressFore Rolo Slider.This issue affects Rolo Slider: from n/a through 1.0.9...
CVE-2024-1438 WordPress Rolo Slider plugin <= 1.0.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in PressFore Rolo Slider.This issue affects Rolo Slider: from n/a through 1.0.9...
CVE-2024-1438 WordPress Rolo Slider plugin <= 1.0.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in PressFore Rolo Slider.This issue affects Rolo Slider: from n/a through 1.0.9...
WordPress plugin Rolo Slider 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-18048 · Pressfore · Pressfore Rolo Slider
Name of the Vulnerable Software and Affected Versions: PressFore Rolo Slider versions 1.0.9 and earlier Description: A Missing Authorization vulnerability has been identified in PressFore Rolo Slider. This issue allows unauthorized access. The estimated number of potentially affected devices is n...
Rolo Slider <= 1.0.9 - Missing Authorization to Authenticated(Subscriber+) Settings Change
Description The Rolo Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajaxcallback' function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with subscriber access and above, t...
WordPress Rolo Slider Plugin <= 1.0.9 is vulnerable to Settings Change
Software Rolo Slider Type Plugin Vulnerable versions = 1.0.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2024-1438 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID 601d954731d6 Credits Emili Castells Required privilege...
DEBIAN-CVE-2006-1356
Stack-based buffer overflow in the countvcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file e.g. contacts.vcf containing a long line...
Stack overflow
Stack-based buffer overflow in the countvcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file e.g. contacts.vcf containing a long line...
CVE-2006-1356
The CVE-2006-1356 entry concerns a stack-based buffer overflow in the count_vcards function of LibVC 3, as used in Rolo. The overflow is triggered by a vCard file (e.g., contacts.vcf) containing a long line, allowing user-assisted attackers to execute arbitrary code. The available connected docum...
CVE-2006-1356
Stack-based buffer overflow in the countvcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file e.g. contacts.vcf containing a long line...