Online-Book-Store-Website Security Vulnerability

Online-Book-Store-Website is an online bookstore website. A security vulnerability exists in Online-Book-Store-Website version 1.0, which is caused by a business logic error in the productprice parameter of the /shop.php file...

Online-Book-Store-Website SQL Injection Vulnerability

Online-Book-Store-Website is an online bookstore website. A SQL injection vulnerability exists in Online-Book-Store-Website version 1.0, which originates from a SQL injection vulnerability in the search parameter of the /search.php file...

BIT-MAGENTO-2021-28584 Magento Commerce path traversal vulnerability in child theme store creation

Magento versions 2.4.2 and earlier, 2.4.1 and earlier and 2.3.6 and earlier are affected by a Path Traversal vulnerability when creating a store with child theme.Successful exploitation could lead to arbitrary file system write by an authenticated attacker. Access to the admin console is required...

BIT-JAEGER-2020-10750

Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container's log file to discover the Kafka credentials...

SUSE CVE-2023-52522

In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neighperiodicwork While looking at a related syzbot report involving neighperiodicwork, I found that I forgot to add an annotation when deleting an RCU protected item from a list. Readers use...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: flannel, pulumi-language-dotnet, fulcio, vault-csi-provider, prometheus-mongodb-exporter, crossplane, minio, prometheus-alertmanager-fips, certificate-transparency, kube-logging-logging-operator, prometheus-beat-exporter, prometheus-node-exporter,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: ferretdb, zot, crossplane-provider-aws-cloudfront, crossplane-provider-aws-memorydb, fuse-overlayfs-snapshotter, cass-operator, crossplane-provider-aws-route53, cortex, kubernetes-csi-external-provisioner, pulumi-language-yaml, temporal-ui-server, dgraph, fulcio,...

Online Mobile Store Management System Cross-Site Scripting Vulnerability

Online Mobile Store Management System is an online mobile store management system. A cross-site scripting vulnerability exists in Online Mobile Store Management System version 1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the /?p=products file, and ca...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: flannel, pulumi-language-dotnet, fulcio, vault-csi-provider, prometheus-mongodb-exporter, crossplane, minio, prometheus-alertmanager-fips, certificate-transparency, kube-logging-logging-operator, prometheus-beat-exporter, prometheus-node-exporter,...

Important: Red Hat Enhancement Advisory: redis:7 update

An update for the redis:7 module is now available for Red Hat Enterprise Linux 9. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set...

CVE-2024-1088

The Password Protected Store for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9 via the REST API. This makes it possible for unauthenticated attackers to extract sensitive data including post titles and content...

CVE-2024-1088 Password Protected Store for WooCommerce <= 2.2 - Information Exposure via REST API

The Password Protected Store for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the REST API. This makes it possible for unauthenticated attackers to extract sensitive data including post titles and content...

CVE-2024-1088

The CVE-2024-1088 entry covers the Password Protected Store for WooCommerce WordPress plugin, which allows unauthenticated REST API access to sensitive data (post titles and content) in all versions up to 1.9. Public sources corroborate this information and indicate a mitigation/patch: version 2....

WordPress Plugin Password Protected Store for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Dell Secure Connect Gateway Cross-Site Scripting Vulnerability (CNVD-2024-20302)

Dell Secure Connect Gateway is a secure connectivity gateway from Dell USA. Dell Secure Connect Gateway suffers from a cross-site scripting vulnerability that stems from a cross-site scripting vulnerability in the Policy Manager inclusion store. No detailed vulnerability details are provided at...

CVE-2023-52522

A flaw was found in the Linux kernel that allows for potential store tearing within the neighperiodicwork function, meaning a write operation on a value is not protected properly and could result in inconsistencies if another process or thread reads from that value before the operation is complet...

CVE-2024-2154

A vulnerability has been found in SourceCodester Online Mobile Management Store 1.0 and classified as critical. This vulnerability affects unknown code of the file viewproduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2024-2153

A vulnerability, which was classified as critical, was found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /admin/orders/vieworder.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-2154

CVE-2024-2154 affects SourceCodester Online Mobile Management Store 1.0, specifically the view_product.php file where the id parameter enables SQL injection. The vulnerability is exploitable remotely and has been disclosed publicly (VDB-255586); impact is high for confidentiality, integrity, and ...

CVE-2024-2153 SourceCodester Online Mobile Management Store view_order.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /admin/orders/vieworder.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...