6968 matches found
CVE-2023-43043
IBM Maximo Application Suite - Maximo Mobile for EAM 8.10 and 8.11 could disclose sensitive information to a local user. IBM X-Force ID: 266875...
WordPress Plugin WP Show Posts Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...
WordPress Hustle Plugin <= 7.8.3 is vulnerable to Sensitive Data Exposure
Software Hustle Type Plugin Vulnerable versions = 7.8.3 Fixed in 7.8.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-0368 Patch priority Low CVSS severity Low 8.6 Developer WPMU DEV PSID 27afdc4a9565 Credits Sean Murphy Required privilege...
PT-2024-13074 · Ibm · Ibm Maximo Application Suite - Maximo Mobile For Eam
Name of the Vulnerable Software and Affected Versions: IBM Maximo Application Suite - Maximo Mobile for EAM versions 8.10 through 8.11 Description: The issue could disclose sensitive information to a local user. Recommendations: For versions 8.10 through 8.11, at the moment, there is no informati...
CVE-2024-22045
A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.1 SP1. The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information. This information is also...
WordPress Blossom Spa Theme <= 1.3.4 is vulnerable to Sensitive Data Exposure
Software Blossom Spa Type Theme Vulnerable versions = 1.3.4 Fixed in 1.3.5 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2107 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID fe344129382a Credits Krzysztof Zając Required...
WordPress Post Grid and Gutenberg Blocks Plugin <= 2.2.68 is vulnerable to Sensitive Data Exposure
Software Post Grid and Gutenberg Blocks Type Plugin Vulnerable versions = 2.2.68 Fixed in 2.2.69 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-7072 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 22574660ebb2 Credits Hung -mov...
WordPress f(x) Private Site Plugin <= 1.2.1 is vulnerable to Sensitive Data Exposure
Software fx Private Site Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-0906 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 800faead5d18 Credits Francesco Carlucci Required...
WordPress Seriously Simple Podcasting Plugin < 3.0.0 is vulnerable to Sensitive Data Exposure
Software Seriously Simple Podcasting Type Plugin Vulnerable versions 3.0.0 Fixed in 3.0.0 OWASP Top 10 A4: Insecure Design Classification Sensitive Data Exposure CVE CVE-2023-6444 Patch priority Low CVSS severity Low 5.3 Developer Castos PSID d8c267ec50e4 Credits Krzysztof Zając CERT PL Required...
NETGEAR CBR40 安全漏洞
The NETGEAR CBR40/CBK40/CBM43 are all routers from NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. An information disclosure vulnerability exists in the NETGEAR CBR40/CBK40/CBM43, which stems from insufficient protection of sensitive informati...
Path traversal
A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version:...
CVE-2023-47221
CVE-2023-47221 is a path traversal vulnerability in QNAP Photo Station. It could allow authenticated administrators to read contents of arbitrary files over the network. Affected software: Photo Station prior to version 6.4.2. Root cause: path traversal vulnerability in the Photo Station componen...
CVE-2024-26309
Archer Platform 6.x before 6.14 P2 HF2 6.14.0.2.2 contains a sensitive information disclosure vulnerability. An unauthenticated attacker could potentially obtain access to sensitive information via an internal URL...
CVE-2023-42509
JFrog Artifactory later than version 7.17.4 but prior to version 7.77.0 is vulnerable to an issue whereby a sequence of improperly handled exceptions in repository configuration initialization steps may lead to exposure of sensitive data...
Design/Logic Flaw
JFrog Artifactory later than version 7.17.4 but prior to version 7.77.0 is vulnerable to an issue whereby a sequence of improperly handled exceptions in repository configuration initialization steps may lead to exposure of sensitive data...
CVE-2023-42509
JFrog Artifactory versions >7.17.4 and
CVE-2024-24375
SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter...
macOS 13.x < 13.6.5 Multiple Vulnerabilities (HT214085)
The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.6.5. It is, therefore, affected by multiple vulnerabilities: - This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4,...
PT-2024-18294 · WordPress · Woocommerce Pdf Invoices & Packing Slips
Name of the Vulnerable Software and Affected Versions: PDF Invoices and Packing Slips For WooCommerce plugin for WordPress versions up to, and including, 1.3.7 Description: The issue allows authenticated attackers with subscriber-level access and above to inject a PHP Object via deserialization o...
BIT-KUSTOMIZE-2022-24877 Improper path handling in kustomization files allows path traversal
Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious kustomization.yaml allows an attacker to expose sensitive data from the controller’s pod filesystem and possibly privilege escalation in multi-tenancy deployments...