Amazon S3 Browser Security Vulnerability

Amazon S3 Browser is a web-based online storage service by Amazon.com, Inc. enables users to easily store files on a web server. A security vulnerability exists in Amazon S3 Browser versions v.11.4.5 and v.10.9.9, which stems from a vulnerability that could allow a remote attacker to gain access ...

WordPress WP2Speed Faster Plugin <= 1.0.1 is vulnerable to Sensitive Data Exposure

Software WP2Speed Faster Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-37924 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4c3fe3bd4ff3 Credits Peng Zhou Required privilege...

WordPress Kiwi Plugin <= 2.1.7 is vulnerable to Sensitive Data Exposure

Software Kiwi Type Plugin Vulnerable versions = 2.1.7 Fixed in 2.1.8 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-3228 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4e7034ad8403 Credits Krzysztof Zając Required privilege...

SAP PDCE 安全漏洞

SAP PDCE is a solution from SAP Germany. It is designed to help companies manage and optimize the process of integrating and enriching personal data. SAP PDCE suffers from an authorization issue vulnerability that stems from not performing the necessary authorization checks on authenticated users...

SQL Injection Vulnerability in Human Resource Information Management System of Beijing Hongjing Century Software Company Limited (CNVD-2024-34315)

Beijing Hongjing Century Software Co., Ltd. is a professional e-HR vendor in China. A SQL injection vulnerability exists in the human resources information management system of Beijing Hongjing Century Software Company Limited, which can be exploited by attackers to obtain sensitive information...

WordPress FileBird Document Library plugin <= 2.0.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin FileBird Document Library versions = 2.0.6...

WordPress Tablesome plugin <= 1.0.33 - Sensitive Data Exposure via API vulnerability

Sensitive Data Exposure via API vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin Tablesome versions = 1.0.33...

WordPress FileBird Document Library Plugin <= 2.0.6 is vulnerable to Sensitive Data Exposure

Software FileBird Document Library Type Plugin Vulnerable versions = 2.0.6 Fixed in 2.0.8.1 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-37504 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7621ab22a70e Credits Peng Zhou...

WordPress Table & Contact Form 7 Database – Tablesome Plugin <= 1.0.33 is vulnerable to Sensitive Data Exposure

Software Table & Contact Form 7 Database – Tablesome Type Plugin Vulnerable versions = 1.0.33 Fixed in 1.0.34 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-37498 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b592d73e1659...

WordPress Page and Post Clone Plugin <= 6.0 is vulnerable to Sensitive Data Exposure

Software Page and Post Clone Type Plugin Vulnerable versions = 6.0 Fixed in 6.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-5942 Patch priority Low CVSS severity Low 2.7 Developer Claim ownership PSID 2f05aa4ff3e4 Credits Bassem Essam Required...

WordPress Advanced File Manager Plugin <= 5.2.4 is vulnerable to Sensitive Data Exposure

Software Advanced File Manager Type Plugin Vulnerable versions = 5.2.4 Fixed in 5.2.5 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-5598 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f0b48a6d68bd Credits emad Required...

CVE-2024-5598

The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fmalocalfilesystem' function. This makes it possible for unauthenticated attackers to extract sensitive data including backups or other sensitive...

CVE-2024-5598

The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fmalocalfilesystem' function. This makes it possible for unauthenticated attackers to extract sensitive data including backups or other sensitive...

The vulnerability of the Apache Superset data visualization software lies in insufficient validation of input data. This allows attackers to execute arbitrary SQL commands and disclose sensitive information that should be protected.

The vulnerability of the Apache Superset data visualization software relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands and disclose sensitive information that is protected by the system...

WordPress SEO SIMPLE PACK Plugin <= 3.2.1 is vulnerable to Sensitive Data Exposure

Software SEO SIMPLE PACK Type Plugin Vulnerable versions = 3.2.1 Fixed in 3.3.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2795 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b6dc01036030 Credits Krzysztof Zając Required...

Autodesk AutoCAD Out-of-Bounds Read Vulnerability (CNVD-2024-33006)

Autodesk AutoCAD is a set of professional 3D drawing software from the American Autodesk Corporation. An out-of-bounds read vulnerability exists in Autodesk AutoCAD version 2024.1.4, which stems from a lack of proper validation of user-supplied data by XB and XT during parsing of pskernel.DLL, an...

WordPress TrustedLogin Vendor Plugin < 1.1.1 is vulnerable to Sensitive Data Exposure

Software TrustedLogin Vendor Type Plugin Vulnerable versions 1.1.1 Fixed in 1.1.1 OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2024-37270 Patch priority Low CVSS severity Low 5.3 Developer TrustedLogin PSID d31d0f132840 Credits Dhabaleshwar Das Require...

Vulnerabilities fixed in WordPress

WordPress developers have fixed vulnerabilities in WordPress. A malicious party could exploit the vulnerabilities to launch a Cross-Site Scripting attack. Such an attack could lead to execution of arbitrary code in the victim's browser, or possibly access to sensitive data in the context of the...

PT-2024-28268 · Wavlink · Wavlink Wn551K1

Name of the Vulnerable Software and Affected Versions: WAVLINK WN551K1 affected versions not specified Description: The issue allows attackers to obtain sensitive router information through the 'live check.shtml' endpoint. Recommendations: At the moment, there is no information about a newer...

CVE-2022-44587 WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability

Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP 2FA: from n/a through 2.6.3...