Drupal XSS Vulnerability (SA-CORE-2024-003) - Windows

Drupal is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...

Drupal XSS Vulnerability (SA-CORE-2024-003) - Linux

Drupal is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...

Fedora 41 : python3.12 (2024-340a4bdc5d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-340a4bdc5d advisory. Security fix for CVE-2024-12254 ---- Update to 3.12.8 Tenable has extracted the preceding description block directly from the Fedora security...

Security Bulletin: IBM QRadar SIEM is vulnerable to cross-site scripting (CVE-2024-47107)

Summary IBM QRadar SIEM is vulnerable to cross-site scripting. This vulnerability has been addressed in the update. Vulnerability Details CVEID:CVE-2024-47107 DESCRIPTION: IBM QRadar is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary...

CVE-2024-52586

eLabFTW is an open source electronic lab notebook for research labs. A vulnerability has been found starting in version 4.6.0 and prior to version 5.1.0 that allows an attacker to bypass eLabFTW's built-in multifactor authentication mechanism. An attacker who can authenticate locally by knowing o...

PT-2024-36126 · Unknown · Abcbiz Addons/Templates For Elementor

Name of the Vulnerable Software and Affected Versions: ABCBiz Addons and Templates for Elementor versions 2.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored Cross-site Scripting XSS vulnerability. This...

PT-2024-12263 · WordPress · Wp Quick Post Duplicator

Name of the Vulnerable Software and Affected Versions: WP Quick Post Duplicator versions 2.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For WP Quick Po...

PT-2024-13819 · Ashish Ajani · Wp Simple Html Sitemap

Name of the Vulnerable Software and Affected Versions: Ashish Ajani WP Simple HTML Sitemap versions 2.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For...

PT-2024-12086

Name of the Vulnerable Software and Affected Versions WebberZone Top 10 versions 3.2.3 and earlier Description The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations For versions 3.2.3 and...

PT-2024-13686 · Godaddy · Godaddy Email Marketing

Name of the Vulnerable Software and Affected Versions: GoDaddy Email Marketing versions 1.4.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For GoDadd...

PT-2024-12001 · Unknown · Clever Widgets Enhanced Text Widget

Name of the Vulnerable Software and Affected Versions: Clever Widgets Enhanced Text Widget versions 1.5.8 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Enhanced Text Widget, which allows exploiting incorrectly configured access control security...

PT-2024-12131 · Unknown · Total Poll Lite

Name of the Vulnerable Software and Affected Versions: Total Poll Lite versions through 4.8.6 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 4.8.6,...

PT-2024-13689 · Unknown · Clever Widgets Enhanced Text Widget

Name of the Vulnerable Software and Affected Versions: Clever Widgets Enhanced Text Widget versions 1.6.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Enhanced Text Widget, which allows exploiting incorrectly configured access control security...

PT-2024-13930 · Google · Google Language Translator

Name of the Vulnerable Software and Affected Versions: Google Language Translator versions 6.0.19 and earlier Description: The issue is related to a Missing Authorization vulnerability in Translate AI Multilingual Solutions Google Language Translator, which allows exploiting incorrectly configure...

PT-2024-12155 · WordPress · Backup Bank

Name of the Vulnerable Software and Affected Versions: Backup Bank: WordPress Backup Plugin versions 4.0.28 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

PT-2024-35395 · Unknown · Tuleap Community Edition +1

Name of the Vulnerable Software and Affected Versions: Tuleap Community Edition versions prior to 16.1.99.50 Tuleap Enterprise Edition versions prior to 16.1-4 Tuleap Enterprise Edition versions prior to 16.0-7 Description: A malicious user with the ability to create an artifact in a tracker with...

PT-2024-13504 · Ncrafts · Formcraft

Name of the Vulnerable Software and Affected Versions: nCrafts FormCraft versions 1.2.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 1.2.7 and...

PT-2024-12175

Name of the Vulnerable Software and Affected Versions JoomSky JS Job Manager versions 2.0.0 and earlier Description The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations For JoomSky JS Job...

PT-2024-35931 · Themeum · Tutor Lms Elementor Addons

Name of the Vulnerable Software and Affected Versions: Tutor LMS Elementor Addons versions 2.1.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in Themeum Tutor LMS Elementor Addons. Recommendations: For Tutor LMS Elementor Addons versions 2.1.5 and earlier...

PT-2024-13812 · Metaphor Creations · Post Duplicator

Name of the Vulnerable Software and Affected Versions: Metaphor Creations Post Duplicator versions through 2.31 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...