ROS-20240904-02

Vulnerability of Microsoft .NET software platforms and Microsoft software development tools Visual Studio is related to a heap buffer overflow. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...

CVE-2023-49233

Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of...

CVE-2024-8388

Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing the transition to fullscreen mode after the fix for CVE-2023-6870 in Firefox 121. This could lead to spoofing the browser UI if the sudden appearance of the prompt distracted the...

CVE-2023-49233

Visual Planning Admin Center 8 (pre-build 240207) is affected by insufficient access checks. By exploiting this, a non-administrative Visual Planning account can access functions normally reserved for administrators, potentially obtaining various configured credentials and elevating privileges to...

PT-2024-13702 · Unknown · Visual Planning Admin Center

Name of the Vulnerable Software and Affected Versions: Visual Planning Admin Center 8 versions prior to v.1 Build 240207 Description: The issue is related to insufficient access checks, allowing attackers with non-administrative accounts to utilize functions normally reserved for administrators...

CVE-2023-49233

Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of...

Visual Planning Admin Center 安全漏洞

Visual Planning Admin Center is a cloud-based resource management and scheduling software from Visual Planning. A security vulnerability exists in versions prior to Visual Planning Admin Center 8 Build 240207 that stems from insufficient access checking. An attacker could exploit the vulnerabilit...

CVE-2023-49233

Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of...

CVE-2024-43963

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WaspThemes YellowPencil Visual CSS Style Editor allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through 7.6.1...

WordPress Visual Sound (old) plugin <= 1.06 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Visual Sound old versions = 1.06...

WordPress Visual Sound (old) Plugin <= 1.06 is vulnerable to Cross Site Request Forgery (CSRF)

Software Visual Sound old Type Plugin Vulnerable versions = 1.06 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8047 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d48c153c5f25 Credits Daniel Ruf Required...

CVE-2024-8197

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-7859. Reason: This candidate is a reservation duplicate of CVE-2024-7859. Notes: All CVE users should reference CVE-2024-7859 instead of this candidate. All references and descriptions in this candidate have been remov...

CVE-2024-8197

...

CVE-2024-8197

CVE-2024-8197 is a reserved/duplicate entry that maps to CVE-2024-7859. Connected sources confirm CVE-2024-7859 affects the Visual Sound WordPress plugin (versions up to 1.03) by lacking CSRF protection when updating settings, potentially allowing a logged-in admin to change settings via CSRF. No...

PT-2024-38868 · WordPress · Visual Sound

Name of the Vulnerable Software and Affected Versions: Visual Sound plugin for WordPress versions up to, and including, 1.03 Description: The Visual Sound plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on a function. This makes it...

WordPress Visual CSS Style Editor plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin YellowPencil Visual CSS Style Editor versions = 7.6.1...

ROS-20240826-18

Vulnerability in the .NET development platform of Microsoft's software development tool Visual Studio is related to the transmission of credentials in unencrypted form. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information Vulnerability in the...

The vulnerability affects the .NET development platform used by Microsoft Visual Studio, allowing attackers to trigger a service failure.

The vulnerability of the .NET development platform used by Microsoft Visual Studio is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability affects the .NET development platform used by Microsoft Visual Studio, allowing attackers to exploit it to disclose sensitive information.

The vulnerability of the .NET development platform used by Microsoft Visual Studio is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

USN-6200-1: ImageMagick vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that ImageMagick incorrectly handled the “-authenticate” option for password-protected PDF files. An attacker could possibly use this issue to inject additional...