CVE-2024-1376

The Event post plugin for WordPress is vulnerable to unauthorized bulk metadata update due to a missing capability check on the savebulkdatas function in all versions up to, and including, 5.9.4. This makes it possible for authenticated attackers, with subscriber access or higher, to update...

WordPress WP-Stateless plugin <= 3.4.0 - Missing Authorization to Limited Arbitrary Options Update vulnerability

Missing Authorization to Limited Arbitrary Options Update vulnerability discovered by Krzysztof Zając in WordPress Plugin WP-Stateless versions = 3.4.0...

Unspecified Vulnerability in Oracle MySQL (CNVD-2024-11152)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server version 8.0.35 and earlier, version 8.2.0 and earlier. An attacker can exploit this...

CVE-2024-0869

The Instant Images – One Click Image Uploads from Unsplash, Openverse, Pixabay and Pexels plugin for WordPress is vulnerable to unauthorized arbitrary options update due to an insufficient check that neglects to verify whether the updated option belongs to the plugin on the instant-images/license...

WordPress plugin Instant Images security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Application Object Library AOL, Application Object Library are both products of the United States Oracle Oracle. Oracle E-Business Suite is a fully integrated set of global business management software. Oracle E-Business Suite is a set of fully...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

Oracle Enterprise Manager Base Platform Security Vulnerability

Oracle Enterprise Manager Base Platform is a set of local management platform from Oracle Corporation in the United States. The platform is primarily used to manage Oracle product deployments. ecto is an elixir-ecto open source toolkit for data mapping and language integration queries. A security...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collections, and other capabilities. A security vulnerability exists in Oracle WebCenter Content version...

Oracle BI Publisher Security Vulnerability

Oracle BI Publisher is a reporting solution from Oracle Corporation USA that makes it easier and faster to create, manage and deliver all reports and documents than traditional reporting tools. A security vulnerability exists in Oracle BI Publisher version 12.2.1.4.0 for Oracle Analytics. An...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Knowledge Management is one of the knowledge...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Customer...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management, and other capabilities. iSupport is one of the Internet-based customer suppo...

CVE-2023-6598

The SpeedyCache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the speedycachesavevarniship, speedycacheimgupdatesettings, speedycachepreloadingaddsettings, and speedycachepreloadingdeleteresource functions in all versions up to, and...

Design/Logic Flaw

The Ovic Responsive WPBakery WordPress plugin before 1.2.9 does not limit which options can be updated via some of its AJAX actions, which may allow attackers with a subscriber+ account to update blog options, such as 'userscanregister' and 'defaultrole'. It also unserializes user input in the...

CVE-2023-50783 Apache Airflow: Improper access control vulnerability on the "varimport" endpoint

Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable. This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification. Users are...

kube-apiserver authentication bypass vulnerability

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a new pod or patch...