22514 matches found
CVE-2023-46175 IBM Cloud Pak for Multicloud Management information disclosure
IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user...
CVE-2023-46175 IBM Cloud Pak for Multicloud Management information disclosure
IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user...
CVE-2024-47337
Missing Authorization vulnerability in Phillip Dane Joy Of Text Lite joy-of-text.This issue affects Joy Of Text Lite: from n/a through = 2.3.1...
CVE-2024-47337
CVE-2024-47337 affects the WordPress Joy Of Text Lite plugin up to version 2.3.1, with a Missing Authorization (Broken Access Control) flaw. The available details show low severity (CVSS 3.1/3.1 vector: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N; base 4.3) and unauthorized access risk, but no explicit e...
CVE-2024-47337 WordPress Joy Of Text Lite plugin <= 2.3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Stuart Wilson Joy Of Text Lite.This issue affects Joy Of Text Lite: from n/a through 2.3.1...
CVE-2024-47337 WordPress Joy Of Text Lite plugin <= 2.3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Phillip Dane Joy Of Text Lite joy-of-text.This issue affects Joy Of Text Lite: from n/a through = 2.3.1...
WordPress Joy Of Text Lite plugin <= 2.3.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Guru Raghav Saravanan Patchstack Alliance in WordPress Plugin Joy Of Text Lite versions = 2.3.1...
CVE-2024-47337: Missing Authorization
Missing Authorization vulnerability in Phillip Dane Joy Of Text Lite joy-of-text.This issue affects Joy Of Text Lite: from n/a through = 2.3.1...
WordPress plugin Joy Of Text Lite has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...
IBM Cloud Pak for Multicloud Management security vulnerabilities
IBM Cloud Pak for Multicloud Management is an application from International Business Machines IBM, Inc. The default functionality used to manage multi-cloud environments. A security vulnerability exists in IBM Cloud Pak for Multicloud Management versions 2.3 through 2.3 FP8 that stems from stori...
PT-2024-9159 · Nextcloud +2 · Nextcloud Enterprise Server +3
Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 28.0.11 Nextcloud Server versions prior to 29.0.8 Nextcloud Server versions prior to 30.0.1 Nextcloud Enterprise Server versions prior to 25.0.13.13 Nextcloud Enterprise Server versions prior to 26.0.13.9...
PT-2024-32551 · WordPress · Stuart Wilson Joy Of Text Lite
Name of the Vulnerable Software and Affected Versions: Stuart Wilson Joy Of Text Lite versions 2.3.1 and earlier Description: A Missing Authorization issue is present in Stuart Wilson Joy Of Text Lite, allowing for unauthorized access. This issue impacts the plugin up to version 2.3.1 on WordPres...
PT-2024-13336 · Ibm · Ibm Cloud Pak For Multicloud Management
Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Multicloud Management versions 2.3 through 2.3 FP8 Description: The issue concerns the storage of user credentials in log files in plain clear text, which can be accessed by a privileged user. This results in the exposure of...
Security Bulletin: Vulnerabilities in Google Protocol Buffers affect IBM watsonx.data
Summary Google Protocol Buffers and protobuf-java core and lite have multiple vulnerabilities that can affect watsonx.data. These vulnerablities include denail of service attacks and remote code executions, Vulnerability Details CVEID:CVE-2015-5237 DESCRIPTION: Google Protocol Buffers could allow...
CVE-2024-8481
The The Special Text Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.2.2. This is due to the plugin adding the filter addfilter'commenttext', 'doshortcode'; which will run all shortcodes in comments. This makes it possible for...
CVE-2024-8481
CVE-2024-8481 affects the WordPress plugin Special Text Boxes up to 6.2.2 due to the filter add_filter('comment_text','do_shortcode') allowing unauthenticated arbitrary shortcode execution in comments. A patch exists; upgrade to 6.2.4 or later to remediate.
CVE-2024-8481 Special Text Boxes <= 6.2.2 - Unauthenticated Arbitrary Shortcode Execution
The The Special Text Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.2.2. This is due to the plugin adding the filter addfilter'commenttext', 'doshortcode'; which will run all shortcodes in comments. This makes it possible for...
CVE-2024-8481: Improper Control of Generation of Code
The The Special Text Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.2.4. This is due to the plugin adding the filter addfilter'commenttext', 'doshortcode'; which will run all shortcodes in comments. This makes it possible for...
WordPress Plugin “The Special Text Boxes” – Code Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...
