10910 matches found
CVE-2023-49233: Insufficiently Protected Credentials
Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of...
PT-2024-13702 · Unknown · Visual Planning Admin Center
Name of the Vulnerable Software and Affected Versions: Visual Planning Admin Center 8 versions prior to v.1 Build 240207 Description: The issue is related to insufficient access checks, allowing attackers with non-administrative accounts to utilize functions normally reserved for administrators...
CVE-2023-49233
Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of...
CVE-2024-43963
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WaspThemes YellowPencil Visual CSS Style Editor allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through 7.6.1...
WordPress Visual Sound (old) plugin <= 1.06 - Settings Update via CSRF vulnerability
Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Visual Sound old versions = 1.06...
PT-2024-30825
Name of the Vulnerable Software and Affected Versions WaspThemes YellowPencil Visual CSS Style Editor versions through 7.6.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This...
WordPress Visual Sound (old) Plugin <= 1.06 is vulnerable to Cross Site Request Forgery (CSRF)
Software Visual Sound old Type Plugin Vulnerable versions = 1.06 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8047 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d48c153c5f25 Credits Daniel Ruf Required...
CVE-2024-43963: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WaspThemes YellowPencil Visual CSS Style Editor allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through 7.6.1...
CVE-2024-8197
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-7859. Reason: This candidate is a reservation duplicate of CVE-2024-7859. Notes: All CVE users should reference CVE-2024-7859 instead of this candidate. All references and descriptions in this candidate have been remov...
CVE-2024-8197
CVE-2024-8197 is a reserved/duplicate entry that maps to CVE-2024-7859. Connected sources confirm CVE-2024-7859 affects the Visual Sound WordPress plugin (versions up to 1.03) by lacking CSRF protection when updating settings, potentially allowing a logged-in admin to change settings via CSRF. No...
PT-2024-38868 · WordPress · Visual Sound
Name of the Vulnerable Software and Affected Versions: Visual Sound plugin for WordPress versions up to, and including, 1.03 Description: The Visual Sound plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on a function. This makes it...
WordPress Visual CSS Style Editor plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin YellowPencil Visual CSS Style Editor versions = 7.6.1...
ROS-20240826-18
Vulnerability in the .NET development platform of Microsoft's software development tool Visual Studio is related to the transmission of credentials in unencrypted form. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information Vulnerability in the...
.NET Development Platform DoS
The vulnerability of the .NET development platform used by Microsoft Visual Studio is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
.NET Disclosure Sensitive Information
The vulnerability of the .NET development platform used by Microsoft Visual Studio is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...
USN-6200-1: ImageMagick vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that ImageMagick incorrectly handled the “-authenticate” option for password-protected PDF files. An attacker could possibly use this issue to inject additional...
BIT-DOTNET-2024-38081 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...
BIT-DOTNET-SDK-2024-38081 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...
CVE-2024-43263
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Starter allows Stored XSS.This issue affects Visual Composer Starter: from n/a through 3.3...