CVE-2022-3611

An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications...

CVE-2022-3611

An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications...

[SECURITY] Fedora 37 Update: redis-7.0.14-1.fc37

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

The vulnerability of the Galaxy Store app, related to incorrect default permissions, allows a violator to install apps from the Galaxy Store without interacting with the user.

The vulnerability of the Galaxy Store app is related to incorrect default permissions. Exploiting this vulnerability allows a hacker to install apps from the Galaxy Store without any interaction with the user...

Lenovo App Store Information Disclosure Vulnerability

Lenovo App Store is a desktop application from the Chinese company Lenovo. The Lenovo App Store suffers from an information disclosure vulnerability that arises from unauthorized access by certain applications to sensitive user data used by other unrelated applications...

The vulnerability of the Store Exporter plugin for WooCommerce in the WordPress content management system arises from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the Store Exporter plugin for WooCommerce in the WordPress content management system is related to the failure to remove special elements during the processing of the woo-ce admin page. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting...

PT-2023-13455 · Lenovo · Lenovo App Store

Name of the Vulnerable Software and Affected Versions: Lenovo App Store affected versions not specified Description: An information disclosure issue has been identified in the Lenovo App Store, which may allow some applications to gain unauthorized access to sensitive user data used by other...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, buildkitd, conftest-fips, dynamic-localpv-provisioner-fips, kube-oidc-proxy, bank-vaults-fips, timestamp-authority-fips, spark-operator, src, prometheus-adapter-fips, kubescape, k3d, dgraph, prometheus-blackbox-exporter, volume-modifier-for-k8s-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow, k3d, scorecard, dgraph, up, spark-operator, buildkitd, aactl, terraform-provider-sendgrid, slsa-verifier, kubevela, src, kubescape, cortex...

CVE-2023-34085 User Attribute Disclosure via DynamoDB Data Stores

When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user using a maliciously crafted request...

CVE-2023-37532

HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system...

Design/Logic Flaw

HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system...

CVE-2023-37532

CVE-2023-37532 affects HCL Commerce Remote Store server. The connected sources describe a directory traversal vulnerability that lets an attacker read arbitrary files on the target system by sending a specially crafted URL. The core issue is a failure to properly sanitize file paths, enabling acc...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (collectd-libpod-stats, etcd) security update

An update for collectd-libpod-stats and etcd is now available for Red Hat OpenStack Platform 16.1.9 Train. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Ebook Store <= 5.785 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-45602

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.785 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.785 versions...

CVE-2023-45602 WordPress Ebook Store Plugin <= 5.785 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.785 versions...

CVE-2023-45602 WordPress Ebook Store Plugin <= 5.785 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.785 versions...

CVE-2023-45602

CVE-2023-45602 is an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability in the Shopfiles Ltd Ebook Store plugin for WordPress. Public references indicate affected versions are up to 5.785 (some sources list up to 5.784/5.8002). The issue is caused by reflected XSS and could enabl...