WordPress LearnDash LMS Plugin <= 4.10.2 is vulnerable to Sensitive Data Exposure

Software LearnDash LMS Type Plugin Vulnerable versions = 4.10.2 Fixed in 4.10.3 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1208 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 27fca665f224 Credits Karl Emil Nikka Required...

WordPress plugin ARMember security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

Design/Logic Flaw

IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could reveal sensitive partition data to a system administrator. IBM X-Force ID: 257135...

PT-2024-12444 · Ibm · Ibm Powervm Hypervisor

Name of the Vulnerable Software and Affected Versions: IBM PowerVM Hypervisor versions FW950.00 through FW950.90 IBM PowerVM Hypervisor versions FW1020.00 through FW1020.40 IBM PowerVM Hypervisor versions FW1030.00 through FW1030.30 Description: The issue could reveal sensitive partition data to ...

CVE-2023-45027

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in...

CVE-2023-45026 QTS, QuTS hero, QuTScloud

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in...

CVE-2024-21866

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product responds back with an error message containing sensitive data if it receives a specific malformed request...

WordPress ARMember Plugin <= 4.0.24 is vulnerable to Sensitive Data Exposure

Software ARMember Type Plugin Vulnerable versions = 4.0.24 Fixed in 4.0.25 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-0969 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 16435d63d3f2 Credits Francesco Carlucci Required...

WordPress WP Visitor Statistics (Real Time Traffic) Plugin <= 6.9.4 is vulnerable to Sensitive Data Exposure

Software WP Visitor Statistics Real Time Traffic Type Plugin Vulnerable versions = 6.9.4 Fixed in 6.9.5 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-24867 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID...

WordPress Post Thumbnail Editor Plugin <= 2.4.8 is vulnerable to Sensitive Data Exposure

Software Post Thumbnail Editor Type Plugin Vulnerable versions = 2.4.8 Fixed in N/A OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-24845 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5dbd01959d8e Credits Josh...

CVE-2024-21866

Summary of CVE-2024-21866 : Rapid SCADA versions prior to 5.8.4 expose sensitive data in error messages when receiving a malformed request. This is a server-side error disclosure issue in Rapid Software LLC’s Rapid SCADA, enabling an attacker to obtain sensitive information via a specially crafte...

WordPress Relevanssi Plugin < 4.22 is vulnerable to Sensitive Data Exposure

Software Relevanssi Type Plugin Vulnerable versions 4.22 Fixed in 4.22 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5f9eb9b2e9af Credits N/A Required privilege Unauthenticated Publishe...

WordPress WP STAGING – Backup Duplicator & Migration Plugin < 3.2.0 is vulnerable to Sensitive Data Exposure

Software WP STAGING – Backup Duplicator & Migration Type Plugin Vulnerable versions 3.2.0 Fixed in 3.2.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-7204 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 32da6e6cd071 Credits...

WordPress Relevanssi Premium Plugin < 2.25 is vulnerable to Sensitive Data Exposure

Software Relevanssi Premium Type Plugin Vulnerable versions 2.25 Fixed in 2.25 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 420edf018e9b Credits N/A Required privilege Unauthenticated...

DEBIAN-CVE-2023-40550

An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase...

Design/Logic Flaw

A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase...

CVE-2023-40550

CVE-2023-40550 affects Shim/shim in boot path; root cause is an out-of-bounds read during SBAT validation, potentially exposing sensitive data during system boot. Related IBM/DS8K/HMC advisories describe multiple Shim CVEs consolidated under Power HMC, including fixes in microcode bundles (DS8900...

CVE-2023-40550 Shim: out-of-bound read in verify_buffer_sbat()

An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase...

CVE-2023-7204 WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure

The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides...

CVE-2023-7204 WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure

The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides...