PT-2024-28187 · Upqode · Upqode Plum: Spin Wheel & Email Pop-Up

Name of the Vulnerable Software and Affected Versions: Upqode Plum: Spin Wheel & Email Pop-up versions n/a through 2.0 Description: The issue is related to an Access Control vulnerability. It affects the functionality of the software, potentially allowing unauthorized access. Recommendations: For...

WordPress plugin Plum: Spin Wheel & Email Pop-up 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plug-in. A security vulnerability exists in WordPress...

Oracle Linux 8 : python39:3.9 / and / python39-devel:3.9 (ELSA-2024-8359)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8359 advisory. modwsgi numpy python39 3.9.20-1 - Update to 3.9.20 Resolves: RHEL-60007 python3x-pip python3x-setuptools python3x-six python-cffi python-chardet...

python39:3.9 and python39-devel:3.9 security update

modwsgi numpy python39 3.9.20-1 - Update to 3.9.20 Resolves: RHEL-60007 python3x-pip python3x-setuptools python3x-six python-cffi python-chardet python-cryptography python-idna python-lxml python-ply python-psutil python-psycopg2 python-pycparser python-PyMySQL python-pysocks python-requests...

Amazon Linux 2023 : python3.11-pip, python3.11-pip-wheel (ALAS2023-2024-729)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-729 advisory. urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with ProxyManager, the Proxy-Authorization header is only sent to the configured proxy, as expected. However...

Amazon Linux 2023 : python3-pip, python3-pip-wheel (ALAS2023-2024-730)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-730 advisory. urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with ProxyManager, the Proxy-Authorization header is only sent to the configured proxy, as expected. However...

WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by hunter85 Patchstack Alliance in WordPress Plugin Wheel of Life versions = 1.1.8...

WordPress Wheel of Life Plugin <= 1.1.8 is vulnerable to Broken Access Control

Software Wheel of Life Type Plugin Vulnerable versions = 1.1.8 Fixed in 1.1.9 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-47311 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID dc57c1e20b9a Credits hunter85 Required privilege...

CBL Mariner 2.0 Security Update: python-wheel (CVE-2022-40898)

The version of python-wheel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-40898 advisory. - An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attacker...

RHSA-2023:6712 Red Hat Security Advisory: python-wheel security update

Bulletin has no description...

CVE-2022-40898 affecting package python-wheel for versions less than 0.33.6-8

CVE-2022-40898 affecting package python-wheel for versions less than 0.33.6-8. A patched version of the package is available...

CVE-2022-40898

...

CWA for Android: Mobile Devices are not able to see the resources

Mobile Devices are not able to see the resources User may see Spinning wheel on Android device after adding Storefront URL in Workspace App...

Oracle Linux 8 : python3.11-setuptools (ELSA-2024-5532)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5532 advisory. 65.5.1-3 - Security fix for CVE-2024-6345 Resolves: RHEL-50484 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fedora 39 : python3.6 (2024-e27230c6c3)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-e27230c6c3 advisory. Security fix for CVE-2024-6345 in the bundled setuptools wheel. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 40 : python2.7 (2024-4c8a159e6e)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-4c8a159e6e advisory. Security fix for CVE-2024-6345 in the bundled setuptools wheel. Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2022-40898 affecting package python-wheel for versions less than 0.43.0-1

CVE-2022-40898 affecting package python-wheel for versions less than 0.43.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-35198

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. TorchServe 's check on allowedurls configuration can be by-passed if the URL contains characters such as ".." but it does not prevent the model from being downloaded into the model store. Once a fi...

WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerability

Broken Access Control to Unauth Stored XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Plum: Spin Wheel & Email Pop-up versions = 2.0...

WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Plum: Spin Wheel & Email Pop-up versions = 2.0...