Solid Affiliate <= 1.9.1 - Sensitive Information Exposure

Description The Solid Affiliate plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to a segmentation violation in the compositionsolidsourceover component. An attacker can potentially execute arbitrary code by exploiting this vulnerability. Remediation Upgrade lunasvg to version 2.4.1 or higher...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to a segmentation violation in the compositionsolidsource component. An attacker can cause a denial of service. Remediation Upgrade lunasvg to version 2.4.1 or higher. References - GitHub Issue Credit: keepinggg...

PYSEC-2024-285

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...

PYSEC-2024-284

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...

PYSEC-2024-284

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...

PYSEC-2024-285

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...

lunasvg 安全漏洞

LunaSVG is a standalone C SVG rendering library by the individual developer Samuel Ugochukwu. A security vulnerability exists in lunasvg v2.3.9, which stems from a segmentation conflict in the component compositionsolidsource...

CVE-2024-33768

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...

PT-2024-25471 · Lunasvg · Lunasvg

Name of the Vulnerable Software and Affected Versions: lunasvg version 2.3.9 Description: The issue is related to a segmentation violation in the component composition solid source over. Recommendations: For lunasvg version 2.3.9, at the moment, there is no information about a newer version that...

CVE-2024-33637

Insertion of Sensitive Information into Log File vulnerability in Solid Plugins Solid Affiliate.This issue affects Solid Affiliate: from n/a through 1.9.1...

CVE-2024-33637 WordPress Solid Affiliate plugin <= 1.9.1 - Sensitive Data Exposure via Log File vulnerability

Insertion of Sensitive Information into Log File vulnerability in Solid Plugins Solid Affiliate.This issue affects Solid Affiliate: from n/a through 1.9.1...

CVE-2024-33637 WordPress Solid Affiliate plugin <= 1.9.1 - Sensitive Data Exposure via Log File vulnerability

Insertion of Sensitive Information into Log File vulnerability in Solid Plugins Solid Affiliate.This issue affects Solid Affiliate: from n/a through 1.9.1...

CVE-2024-33637

CVE-2024-33637 affects the Solid Affiliate WordPress plugin (Solid Affiliate: affected up to version 1.9.1). The vulnerability is an Insertion of Sensitive Information into Log File, enabling exposure of sensitive data via log files. Public sources confirm the issue details (vendor/plug‑in) but d...

WordPress plugin Solid Affiliate 日志信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A log information disclosu...

WordPress Solid Affiliate plugin <= 1.9.1 - Sensitive Data Exposure via Log File vulnerability

Sensitive Data Exposure via Log File vulnerability discovered by Francois Harvey Patchstack Alliance in WordPress Plugin Solid Affiliate versions = 1.9.1...

WordPress Solid Affiliate Plugin <= 1.9.1 is vulnerable to Sensitive Data Exposure

Software Solid Affiliate Type Plugin Vulnerable versions = 1.9.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-33637 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 0610eeb4f1ac Credits Francois Harvey Required...

PT-2024-4459 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge versions prior to V224.0 Update 5 Description: A vulnerability has been identified that involves an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker t...

PT-2024-4452 · Siemens · Siemens Solid Edge

Name of the Vulnerable Software and Affected Versions: Siemens Solid Edge versions prior to V224.0 Update 5 Description: The issue is related to an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in...

PT-2024-4455 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge versions prior to V224.0 Update 5 Description: A heap-based buffer overflow issue has been identified in the affected application while parsing specially crafted PAR files. This could allow an attacker to execute code in the contex...