418 matches found
CVE-2014-125054
A vulnerability classified as critical was found in koroket RedditOnRails. This vulnerability affects unknown code of the component Vote Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The patch is identified as...
Improper access control
A vulnerability classified as critical was found in koroket RedditOnRails. This vulnerability affects unknown code of the component Vote Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The patch is identified as...
CVE-2014-125054
CVE-2014-125054 affects koroket RedditOnRails, specifically the Vote Handler component. The issue is improper access controls in that handler, with remote exploitation possible. A patch is identified as 7f3c7407d95d532fcc342b00d68d0ea09ca71030 (VDB-217594). Multiple sources (NVD, Red Hat, CVE rec...
CVE-2014-125054 koroket RedditOnRails Vote access control
A vulnerability classified as critical was found in koroket RedditOnRails. This vulnerability affects unknown code of the component Vote Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The patch is identified as...
PT-2023-10124 · Unknown · Koroket Redditonrails
Name of the Vulnerable Software and Affected Versions: koroket RedditOnRails affected versions not specified Description: A critical vulnerability was found in the Vote Handler component of koroket RedditOnRails, leading to improper access controls. The attack can be initiated remotely...
CVE-2022-4879
A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...
Authorization
A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...
CVE-2022-4879 Forged Alliance Forever Vote improper authorization
A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...
CVE-2022-4879 Forged Alliance Forever Vote improper authorization
A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...
CVE-2022-4879
CVE-2022-4879 affects Forged Alliance Forever up to version 3746, targeting the Vote Handler component. The issue is due to manipulation of an unknown functionality that leads to improper authorization. Upgrading to version 3747 mitigates the vulnerability; the patch is identified by 6880971bd3d7...
CVE-2022-4879 Forged Alliance Forever Vote improper authorization
A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...
Forged Alliance Forever 安全漏洞
Forged Alliance Forever is a community-driven project to promote online play of Supreme Commander: Forged Alliance. Forged Alliance Forever suffers from a security vulnerability that stems from an unknown feature of the component Vote Handler that manipulates to cause incorrect authorization...
PT-2023-15893 · Unknown · Forged Alliance Forever
Name of the Vulnerable Software and Affected Versions: Forged Alliance Forever versions up to 3746 Description: A critical issue was found in the Vote Handler component, leading to improper authorization due to manipulation of an unknown functionality. Upgrading to version 3747 addresses this...
The vulnerability of the “Create poll” module in the YOP Poll plugin of the WordPress content management system allows a hacker to perform cross-site scripting attacks.
The vulnerability of the “Create poll” module in the YOP Poll plugin of the WordPress content management system is related to the lack of protection for website structure when processing parameters such as “Vote Button Label”, “Show Results Link”, and “Display Back to vote Link”. Exploiting this...
CVE-2022-1581
The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...
PT-2022-13980 · WordPress · Wp-Polls
Name of the Vulnerable Software and Affected Versions: WP-Polls versions prior to 2.76.0 Description: The issue allows bypassing IP-based limitations to vote in certain situations due to the plugin prioritizing getting a visitor's IP from certain HTTP headers over PHP's REMOTE ADDR...
Inside the ‘Election Integrity App’ Built to Purge US Voter Rolls
True the Vote’s IV3 app is meant to catch election cheaters. But it has a fundamental flaw...
CVE-2021-42045
An issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2. Simple polls allow users to create alerts by changing their User-Agent HTTP header and submitting a vote...