Taier 安全漏洞

Taier is a distributed scheduling system open-sourced by Kangaroo Cloud DTStack. It is designed to reduce the cost of ETL, clarify complex dependencies between tasks, and reduce labor costs for committing, scheduling, and operations. A security vulnerability exists in Taier version 1.4.0 that ste...

CVE-2024-53780

CVE-2024-53780 describes a Cross-Site Request Forgery that enables Stored XSS in the WordPress Load More Posts plugin, affecting versions up to 1.4.0 (per the CVE entry). The available connected sources corroborate the CSRF-to-Stored-XSS issue and indicate a later fix in version 1.5.0 or newer (P...

PT-2024-35893 · Unknown · Load More Posts

Name of the Vulnerable Software and Affected Versions: Load More Posts versions 1.4.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

WordPress plugin Post Carousel Slider for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-34464 · Unknown · Qiwen-File

Name of the Vulnerable Software and Affected Versions: qiwen-file version 1.4.0 Description: The issue is related to a SQL injection vulnerability. It affects the component /mapper/NoticeMapper.xml. Recommendations: For qiwen-file version 1.4.0, consider restricting access to the...

qiwen-file 安全漏洞

qiwen-file qiwen.com is a distributed file system from qiwen. It aims to provide users and enterprises with a simple and convenient file storage solution that can manage files with a perfect directory structure system. A security vulnerability exists in qiwen-file v1.4.0, which originates from a...

Apache Answer 安全漏洞

Apache Answer is a community platform of the Apache USA Foundation. A security vulnerability exists in Apache Answer versions 1.4.0 and earlier, which stems from insufficient cryptographic strength and could result in the generation of tokens that are predictable...

WordPress plugin Jigoshop 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

[SECURITY] [DSA 5805-1] guix security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5805-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 08, 2024 https://www.debian.org/security/faq -...

Debian dsa-5805 : guix - security update

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5805 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5805-1 [email protected] https://www.debian.org/security/ Moritz...

AbanteCart 安全漏洞

AbanteCart is AbanteCart open source set of PHP-based e-commerce platform. A security vulnerability exists in AbanteCart version 1.4.0, which originates from a SQL injection vulnerability in the update function in publichtml/admin/controller/responses/listinggrid/collections.php...

AbanteCart 安全漏洞

AbanteCart is AbanteCart open source set of PHP-based e-commerce platform. A security vulnerability exists in AbanteCart version 1.4.0, which originates from a SQL injection vulnerability in the update function in publichtml/admin/controller/responses/listinggrid/emailtemplates.php...

Laravel Reverb 数据伪造问题漏洞

Laravel Reverb is an open source library for The Laravel Framework. It brings real-time WebSocket communication to Laravel applications. A data forgery issue vulnerability exists in Laravel Reverb versions prior to 1.4.0, which stems from a failure to validate the authentication signature of...

PT-2024-34157 · Laravel · Laravel Reverb

Name of the Vulnerable Software and Affected Versions: Laravel Reverb versions prior to 1.4.0 Description: The issue is related to unverified verification signatures for requests sent to Reverb's Pusher-compatible API. This API is used for scenarios such as broadcasting messages or obtaining...

CVE-2024-50802

A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update function in publichtml/admin/controller/responses/listinggrid/emailtemplates.php. The vulnerability is exploitable via the id parameter...

WordPress File Upload Types by WPForms plugin <= 1.4.0 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin File Upload Types versions = 1.4.0...

WordPress Easy Addons for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab in WordPress Plugin Easy Addons for Elementor versions = 1.5.0...

containernetworking-plugins security update

1:1.4.0-6 - rebuild for CVE-2024-34156 - Resolves: RHEL-57915...

Inadequate Encryption Strength

github.com/apache/incubator-answer is vulnerable to Inadequate Encryption Strength. The vulnerability is due to the use of MD5 hashing for a user's email when accessing Gravatar, which is insecure and can lead to the leakage of user emails. The recommended fix is to upgrade to version 1.4.0, whic...

CVE-2024-40761 Apache Answer: Avatar URL leaked user email addresses

Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead. Users are recommend...