UBUNTU-CVE-2024-50097

In the Linux kernel, the following vulnerability has been resolved: net: fec: don't save PTP state if PTP is unsupported Some platforms such as i.MX25 and i.MX27 do not support PTP, so on these platforms fecptpinit is not called and the related members in fep are not initialized. However,...

jenkins: Item creation restriction bypass vulnerability

A flaw was found in Jenkins. When attempting to create an item prohibited by ACLhasCreatePermission2 or TopLevelItemDescriptorisApplicableInItemGroup through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may...

PT-2024-33929

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises from the unconditional call to fec ptp save state, which can cause the kernel to panic on platforms that do not support PTP, such as i.MX25 and i.MX27. This happens...

Server-side Request Forgery (SSRF)

Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to no restrictions on the URL, in the saveurltocache function. An attacker can access and download local resourc...

PT-2024-16528 · Unknown · Codezips Free Exam Hall Seating Management System

Name of the Vulnerable Software and Affected Versions: Codezips Free Exam Hall Seating Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /pages/save user.php. The manipulation of the image argument leads to unrestricted...

USN-7064-2 nano vulnerability

USN-7064-1 fixed a vulnerability in nano. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that nano allowed a possible privilege escalation through an insecure temporary file. If nano was killed while editing, the permissions grante...

PT-2024-40897 · Unknown · Langchainjs

Name of the Vulnerable Software and Affected Versions: langchainjs version 0.2.5 Description: A path traversal issue exists, allowing attackers to save files anywhere in the filesystem, overwrite existing text files, read .txt files, and delete files. This is exploited through the setFileContent,...

CVE-2024-48235

An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController.java file...

CVE-2024-9585

The Image Map Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saveproject' function with an arbitrary shortcode in versions up to, and including, 6.0.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

CVE-2024-48235

An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController.java file...

OFSoft OFCMS 安全漏洞

OFSoft OFCMS is a content management system CMS developed in Java language by China Zhongtian Network OFSoft. A security vulnerability exists in OFSoft OFCMS version 1.1.2. An attacker can exploit this vulnerability to execute arbitrary code via the save method of the TemplateController.java file...

PT-2024-39702 · WordPress · Image Map Pro

Name of the Vulnerable Software and Affected Versions: Image Map Pro plugin for WordPress versions up to, and including, 6.0.20 Description: The issue is related to Stored Cross-Site Scripting via the save project function, allowing authenticated attackers with contributor-level and above...

PT-2024-33046

Name of the Vulnerable Software and Affected Versions ofcms version 1.1.2 Description An issue in the software allows a remote attacker to execute arbitrary code via the save method of the TemplateController.java file. Recommendations For ofcms version 1.1.2, consider disabling the save method of...

CVE-2024-48235: Improper Control of Generation of Code

An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController.java file...

SOPlanning CMS XSS

The vulnerability of the /soplanning/www/process/groupesave.php component of the SOPlanning CMS system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using the groupeid parameter...

PT-2024-41594

Уязвимость функции kvm save timer модуля arch/loongarch/kvm/timer.c поддержки архитектуры LoongArch ядра операционной системы Linux связана с недостаточным контролем ресурса в период его существования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2022-48993

CVE-2022-48993 is rejected/not used per the initial description; no active vulnerability details are provided.

WordPress HD Quiz – Save Results Light plugin <= 0.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Plugin HD Quiz – Save Results Light versions = 0.5...

WordPress HD Quiz – Save Results Light Plugin <= 0.5 is vulnerable to Broken Access Control

Software HD Quiz – Save Results Light Type Plugin Vulnerable versions = 0.5 Fixed in 0.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-49689 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 904268a13b03 Credits Fariq Fadillah Gusti...

CVE-2024-47634: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Streamline CartBounty – Save and recover abandoned carts for WooCommerce woo-save-abandoned-carts allows Cross Site Request Forgery.This issue affects CartBounty – Save and recover abandoned carts for WooCommerce: from n/a through = 8.2...